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INTRODUCTION 

The VMS System Management I course is designed to teach students how to manage a computer 
njnning the VMS operating system. 

This Student Workbool< is divided into a number of modules, each designed to cover a weli- 
organized topic, or group of topics. Most modules include figures, tables and examples to enable 
students to better understand the material. A separate exercise boolt can be found at the back 
of this workbook to allow students to test their VMS system management skills. 

This section ("Aljout This Course") describes the contents of the course and suggests ways to 
use its materials most effectively. The following topics are discussed here: 

Resources 

Course Description 

Prerequisites 

Course Organization 

Course Goals 

Nongoals 

Course Conventions 

Course Map 



RESOURCES 

students must have access to the following manuals to perfonn the recommended leaming 
activities of this course. Students may be given their own copy of some of these manuals, and 
the instructor may provide others for reference during the week. 

1 . Guide to Setting Up a VMS System 

2. VMS SYSMAN Utility Manual 

3. VMS Install Utility Manual 
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4. Guide to Maintaining a VMS System 

5. VMS Analyze/Disl<_Stnjctum Utility Manual 

6. VMS Backup Utility Manual 

7. VMS Mount Utility Manual 

8. VMS Authorize Utility Manual 

9. VMS Accounting Utility Manual 

10. VMS Monitor Utility Manual 

11. VMS License Management Utility Manual 

Instead of the individual manuals listed above, you may tiave a copy of the VMS System Man- 
ager's Manual. 

At least one copy of the entire extended VMS documentation set should be available for refer- 
ence. 



COURSE DESCRIPTION 

VMS System Management I Is designed to train the system manager or advanced system 
operator of a VAX computer running the VMS operating system. 

The course gives a theoretical as well as a practical insight into system management, in addition 
to routine system management skills, It Introduces tools for monitoring system performance and 
integrity. It discusses various techniques needed to assist users on the system, bacl< up and 
restore system and user files, start up and shut down the system, manage system devices, and 
maintain data security. 
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PREREQUISITES 

To derive the greatest benefit from this course, students must be able to: 
Log in to a VMS system. 
Use the appropriate VMS utilities and commands to: 

— Display on-line help text. 

— Create and manage directories and files. 

— Submit print and batch jobs. 

— Define and use logical names and command synonyms. 

— Display information about the system. 

— Create and maintain private disk volumes. 

— Communicate with other system users. 
Develop DCL command procedures that: 

— Control I/O. 

— Create and access sequential files. 

— Use symbols to manipulate constants and variables. 

— Use lexical functions. 

Define virtual memory and virtual addressing, and describe how virtual memory and physical 
memory are related. 

• Define a process and describe process concepts, including: 

— Working set 

— Paging 

— Types of processes 

— States 

— Priority 

— Privileges 
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Describe the functions of the VMS swapper and scheduler. 
Describe the functions and characteristics of giobal sections. 

These prerequisites can be satisfied by tailing the foliowing courses: 
VMS Utilities and Commands 
VMS System Architecture 

COURSE ORGANIZATION 

This course is organized into a series of modules. Each module has its own learning objectives 
and covers a single topic or group of closely related topics. Each module consists of: 

An introduction, which describes the purpose of the module, provides motivation for mas- 
tering its objectives, and outlines Its contents. 

• One or more objectives, which identify the sl<ills taught in the module. Objectives are 
designed to focus your study efforts on a selected number of skills. 

The nnodule text, which consists of: 

— Descriptive text organized in a list format 

— illustrations, which clarify the relationships among various elements of a VMS system, 
or summarize steps of a particular process or command 

— Examples containing sample listings from actual interactive sessions on a VMS system 
A module summary, which reviews important concepts and skills taught in the module 

Written and laboratory exercises are also provided with this course. Exercises help students to 
review and practice the skills leamed during the lecture session. 
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COURSE GOALS 

After completing this course, students sliouid be abie to: 
Manage system users, which requires: 

— Maintaining such files as the User Authorization RIe and volume quota files 

— Creating user file directories (UFDs) 

— Controlling user processes 

• Manage system resources, which requires: 

— Managing disk and tape volumes 

— Defining device characteristics 

— Creating and managing print and batch queues 

— Backing up and restoring files and volumes 

Start up and shut down the system 

Customize the system 

Install maintenance updates and optional software 

Establish security measures on the system and audit security-related actions done by users 

Monitor the system for behavior and performance problems, and submit Software Perfor- 
mance Reports when appropriate 



NONGOALS 

Programming using system services, run-time library routines, or other VMS features (taught 
In Utilizing VMS Features courses) 

Advanced VMS concepts or system programming (taught in VMS Internals courses) 

Details of layered product features and functions (taught in layered product courses) 

Installation under unusual circumstances 

Details of system performance management and tuning (taught in VMS System Performance 
Management^ 

Details of system security features (taught In VMS System Security Features ) 

VAXcluster management (taught In VAXcluster System Management ) 
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Network management (taught in DECnet Network Management ) 

Creating new DCL commands, help files, and error messages (mentioned in this course, 
but covered in detail in VMS System Management II ) 

Troubleshooting en-or conditions (taught in VMS System Management II ) 

System configuration (taught in VMS System Management It) 

The Files-11 structure of disk and tape volumes (discussed in VMS System Management II) 

Converting software or data to the VMS system from another operating system 



COURSE CONVENTIONS 

Table 1 describes the conventions used in the listings and command tables of the Student 
Workbook. 
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Table 1 : Course Conventions 



Convention 



Meaning 



CTRL/X 
UPPERCASE 



lowercase 



Ellipsis 
(...) 



Press and hold the key labeled CTRL while you press another key (X). 
Many control keys have special meanings. 

In commands, uppercase characters indicate words you type exactly as 
they appear. For example, you would type the following commands as they 
appear: 

$ DIRECTORY 

$ TYPEL0GIN.COM 

Lowercase characters represent elements that you must replace according 
to the description in the text. For example, you must follow certain ailes 
when you replace "file-spec" in the following example: 

$ TYPE file-spec 

Horizontal ellipses indicate that you can enter additional parameters, values, 
or information. For example, you can enter any number of file specifications 
in the following example: 

$ TYPE file-spec, . . . 

Vertical series of periods or ellipses mean that not all of the data that the 
system would display in response to the particular command is shown, or 
that not all the data a user would enter Is shown. 

$ TYPE MYFILE.DAT 



Square 

Brackets 

([]) 



Quotation Marks 
and Apostrophes 



Square brackets indicate that the enclosed Item is optional. (Square brack- 
ets are not optional, however, in the syntax of some file speclfteations.) For 
example, the logical name is optional in the following command: 

$ MOUNT/FOREIGN $TAPE1 

Braces indicate that you must select from the Included items. 

The term quotation marks refers to double quotation marks ("). The term 
apostrophe refers to a single quotation mark ('). 
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MODULE 1 

UNDERSTANDING THE 
USER ENVIRONMENT 
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INTRODUCTION 

When you begin work on a VMS system, you enter an environment consisting of devices, 
programs and data. Ttie devices that compose the physical computer are called hardware. 
The programs that control the hardware and process the data are called software. To perfonn 
job-related tasks on the system, you must use both the hardware and the software. 

This module provides an introduction to VAX hardware, and an overview of the VMS software 
environment. 



OBJECTIVES 

To maintain a VMS system, you should be able to: 

Identify the functions of each component of the hardware environment, namely: 

— The central processing unit (CPU) 

— The console subsystem 

— Main memory 

— The input/output subsystem 

• Identify the purpose of an interconnect device, and list some common interconnect devices 
for VMS systems. 

• Recognize the peripheral devices supported by VMS systems. 
Recognize the format for device names on a VMS system. 

List the characteristics of the following types of system configurations: 

— Single processors 

— Tightly coupled systems (multiprocessors) 

— Loosely coupled systems (networks) 

— VAXclusters 
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Identify the major software components of the VMS operating system. 
Identify software tools and utilities distributed with VMS. 

• Identify some optional software products that can be used on VMS systems. 

• Identify Important system directories, files, and logical names 
— Describe the concept and uses of concealed root directories 
Identify the components of a user's process. 

RESOURCES 

1 . VMS Installation and Operations Manual for your particular VAX system 

2. VAX Systems and Options Catalog 

3. VMS DCL Dictionary 

4. DIGITAL Terminals and Printers Handtmok 

5. DIGITAL Networks and Communications Buyer's Guide 

6. Refer to the user's guide for each device in which you are interested 
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COMPONENTS OF THE HARDWARE ENVIRONMENT 

VAX computer hardware is divided into four subsystems 
Each subsystem has a different function 



Figure 1-1 : VAX Hardware Subsystems 
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Central Processing Unit (CPU) 

Executes instmctlons one at a time 
Relative speeds and physical sizes vary 
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Console Subsystem 



Communicates directly with the CPU 
Is primarily used for: 

— Starting up and shutting down the system 

— Installing software 

— Remote hardware diagnosis 
Components of the console subsystem include: 

— Indicators and controls (implemented in software on some VAX processors) 

— Console terminal 

— Console storage device (not present on some VAX processors) 
Console subsystem runs in: 

— Console mode: accepts console commands 

— Program mode: use as a normal VMS terminal 
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Main Memory 

Main memory is used to store instructions and data 
Two types of memory on VAX systems: 

— READ-ONLY memory (ROM) 

— READ/WRITE memory 

Eacli VAX supports a different amount of memory 

Input/Output Subsystem 

Consists of periplieral devices 

• Provides input to, and output from, the system 

• Common peripherals include: 

— Terminals 

— Printers 

— Disk drives 

— Tape drives 
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INTERCONNECT DEVICES 

Cables that connect various subsystems 

— Example: connect peripherals and memory to processor 

• Also called buses 

• Types of buses include: 

— MASSBUS 

— UNIBUS 

— Q-bus 

— VAX Backplane Interconnect (VAXBI) 

• Different VAX processors support different buses 

• Different buses support different peripherals 
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PERIPHERAL DEVICES 
Terminals 

Used by people to communicate with the computer 
Two types of temfiinals: 

— Hardcopy 

— Video 



Figure 1-2: Hard>Copy and Video Terminals 
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Printers and Printer/Plotters 

• Printers provide hard-copy output from the system 

Various sizes and types include: 

Line printers High speed 

Letter quality printers High quality 
Laser printers High quality print and graphics 

Printer/plotters are used for both hard-copy and graphic output 
Figure 1-3: Printers and Printer/Plotter 
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Disk Drives 

Record and read data on magnetic or optical disl<s 
Often cailed auxiliary memory 
Sometimes called mass storage devices 
Disks used in the drives are called storage media 
Various types of disks include: 

— Cartridges 

— Disk packs 

— Diskettes (also called "floppies") 

— Two types of optical disks: 

Read-only (CDROM) 

Commonly called "compact disks" 

Mastered by the manufacturer, read by the user 

Small format (5.25 inches in diameter) 

Typically used to provide large amounts of text information, such as reference 

manuals, abstracts, etc. 

Write-Once, Read-Many (WORM) 

Commonly called simply "optical disks" 

Available in both small and large (12 and 14 inch) format 

The disk can be written one time, then read many times 

Typically used for archival data storage, and large volume storage of data with 

slow retrieval requirements 

Disks can be: 

— Fixed 

— Removable 
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Figure 1-4: Examples of Disks 
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Tape Drives 



Record and read data on magnetic tapes 
Tapes usually store: 

— Backup copies of data 

— Infrequently used data 
Reel tapes 

— Various lengths 

— Various (tensities 
Tape cartridges 

— Resemble cassette tapes 

— VMS systems treat TU58 cartridges as disks 
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Figure 1-6: Tape Media 
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Figure 1-7: Tape Drives 
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Hierarchical Storage Controller (HSC) 



Intelligent disk and tape controller 
Performs all disk I/O operations 
Allows data sharing in a VAXcluster 
Can also be used with single VAX systems 
Examples of HSC subsystems: 

— HSC50 

— HSC70 
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DEVICE NAMES 

All devices have a unique name in the format: ddcu 

dd A two-letter device code. 

c A one-letter code that specifies the hardware controller for the device. (Con- 

trollers provide the interface between the bus and the device, or between 
two buses.) 

u The unit number of the device. 

* Device code specifies device type 

* The hardware controller number: 

— Identifies the device controller 

— Is represented by a letter from A to Z 

— Is assigned by the system 

* The unit number: 

— Indicates the position of the device on the controller 

— Can be changed by: 

1. Setting a button or switch on the device 

2. installing a unit plug on the device 



Table 1-1 : Device Codes 

Code Device 

CS Console storage device 

DU RA80 or RA81 disl< drive 

LP Line printer 

MF TU78 tape drive 



1- 16 Understanding the User Environment 



SYSTEM CONFIGURATIONS 

You can build different configurations with: 

— VAX processors 

— Interconnects 

— Peripheral devices 

System configurations can be classified as: 

— Single processors 

— Multiple processors 

• A system can be: 

— A single VAX processor and Its peripheral devices 

— A collection of VAX processors 

Single Processor Configurations 

Any single VAX processor and Its peripheral devices 

• The family of single VAX processors Includes: 

— VAX 8810 

— VAX 8600 

— VAX 8500 

— VAX 8200 

— VAX-1 1/780 

— VAX-1 1/750 

— MicroVAXaOOO 

— MicroVAXII 
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Figure 1-8: MicroVAX II 
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Figure 1-9: VAX 8600 
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Multiple Processor Configurations 

• Two or more communicating processors 
Three classifications: 

— Tightly coupled configurations (multiprocessors) 

— Loosely coupled configurations (networks) 

— VAXclusters 



Table 1-2: Comparing Multiple Processor Configurations 




Tightly Coupled < > Loosely Coupled 


System Characteristic 


Multiprocessor 


VAXcluster 


Network 


CPU booting 


Together 


Separate 


Separate 


CPU failure 


Together 


Separate 


Separate 


CPU cabinet location 


Single or adjacent 


Same local area 


Can be widely sepa- 
rated 


Security domain 


Single 


Single 


Multiple 


Management domain 


Single 


Single 


Multiple 


Operating system 


Shared (VMS) 


Separate (all VMS) 


Separate (some may 
not be VMS) 


File system 


Integrated 


Integrated 


Separate 


Growth potential 


Limited 


Very great 


Very great 
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Tightly Coupled Configurations 



Share operating system code 

Cannot operate independently 

Operated and managed as single domains 

Provide higli performance 

Used primarily in compute-intensive applications 

Example: VAX 8800 Series processors 

— Two or more CPUs siiare memory by means of a higli speed bus 

— Multiple processors are transparent to tlie system users 



Figure 1-10: Tigfitiy Coupled System Configuration 
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Loosely Coupled Configurations 

• Example: Network 

Can consist of two or more communicating processors 

• VMS systems can be connected to: 

— Other DIGITAL systems 

— Other manufacturers' systems 

• Local Area Network (LAN) - limited geographical area 

• Wide Area Network (WAN) - larger area 
DIGITAL-to-DIGlTAL networks are established using: 

— Two or more processors 

— l-lardware communication devices 

— Data transmission devices 

— Terminal servers (optional) 

— DECnet software 
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Figure 1-11: DECnet Network 
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Communication Devices 

Synchronous devices 

— Provide communication between computers 

— Run at relatively high speeds 

— Examples: DEUNA, DELUA, DEQNA, DMR11 
Asynchronous devices 

— Typically provide communication between terminals and computers 

— Are slower than synchronous devices 

— Examples: DL11, DZ32, DMZ32 
• Synchronous/Asynchronous Devices 

— Perform both synchronous and asynchronous communications 

— Examples: DMF32 

Different communication devices vary by: 

— Characteristics 

— Function 

— Performance 
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Data Transmission Media 

Transmits data between communication devices 
Various types of media include: 

— Etfiernet cabie 

— Fiber optic cable 

— Telephone lines (twisted-pair) 

— Satellite linl<s 

Different transmission media vary by: 

— Transmission speeds 

— Distances they can span 

— Operating and performance characteristics 

— Capabilities and services 

Terminal Servers 

Optional 

Provide increased flexibility 

Connect terminals to computers in a LAN 

Each terminal can access other systems connected to the same l-AN 

Can also be used to make printers accessible to other systems on the l-AN 
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Figure 1-12: Configuration witii Terminal Servers 
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Clustered Systems (VAXcluster Systems) 

Flexible multiprocessing systems 

Have characteristics of both loosely and tightly coupled systems 

Managed as single domains 

VAXcluster nodes can share: 

— Disk and tape devices and printers 

— A common file system 
VAXcluster nodes can be configured: 

— To present an identical user environment on every node 

— So that each node boots and fails separately 

• In addition to providing the functions of a networi<, a VAXcluster system provides: 

— Higher availability of system resources 

— Faster and easier sharing of information and resources t>etween nodes 

• May start with one or two VMS systems connected by way of Computer Interconnect or 
Ethernet 

— Can be expanded as computing needs increase 
VAXcluster hardware components Include: 

— VMS computer systems, composed of: 

VAX processors 
Local peripherals 

— HSC storage subsystems 

— A Computer Interconnect (CI), composed of: 

A CI bus 

An SC008 Star Coupler 

An intelligent I/O port {a CI780, CI750, or CIBCI) 

— Ethemet hardware 
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A VAXcluster configuration: 

— Can be very similar to a network configuration 

— Can contain the same components as a network: 

VAX processors 
Communication devices 
Transmission media 
Terminal servers (optional) 
DECnet software 

Major difference between a VAXcluster and a network: 

— VMS cluster software, which synchronizes access to shared resources 
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Figure 1-13: Cl-Only VAXcluster Configuration 
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Figure 1-14: Local Area VAXcluster Configuration 
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Figure 1-15: MIxed-lnterconnect VAXcluster Configuration 
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Review of VMS Concepts 

Topics to be covered: 

— DCL and the VMS Operating System 

— Programs, images, and Utiiities 

— Processes 

— i-lardware and Software Contexts 

— Virtual Address Space 

— Working Sets and Baiance Set 

— Paging 

— Sclieduling 

— Swapping 

— Processor Access Modes 
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DIGITAL Command Language (DCL) and the VMS 
Operating System 

The VMS Operating System performs three major functions: 

— Provides communications between users and devices 

— Creates a protected working environment for each user 

— Schedules the use of system resources among ail users in a fair manner 
Many operating system activities are transparent to the user 

— Some activities initiated by the system 

— Other activities initiated by users through commands 
The DIGITAL Command Language (DCL) 

— A language definition of English-like commands 

— A set of routines that execute user commands 
• The Command Language Interpreter (CLI) 

— Translates English-like commands from a user 

— Dispatches translated commands for execution 
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Programs, Images, and Utilities 

A program: 

— Also called a source program 

— A logical sequence of instructions 

— Written in liuman-readable fomi (computer language) 
An object file: 

— A collection of machine code (binary) Instructions 

— Created as a result of tmnslating (or compiling) the source program 
An image: 

— Also called an executable image 

— A sequence of machine code instmctions with addressing information 

— Created as a result of linldng object files together 
A utility: 

— Program supplied with VMS 

— Sometimes has a command language all its own 

— Typically uses DCL to call (Invoke) the utility 



Figure 1-16: Translating a Program Into an Image 
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Processes 

A process is: 

— The total environment in wtiich an image executes 

— Tlie fundamental entity that VMS schedules for execution 
A process is composed of four parts: 

— Virtual address space 

— Hardware context 

— Software context 

— Image 

Hardware and software contexts are collectively called the process context 

— VMS needs this information to save/restore the process during context switching 



Figure 1-17: Components of a VMS Process 
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A subprocess is: 

— Just another process 

— Controlled by the parent process 

— Defined by the attributes and capabilities of the parent process (by default) 

— Automatically deleted when the parent process Is deleted 

— Able to create subprocesses 

Total number of subprocesses a job can create depends on the job's subprocess quota 
which are authorized by the VMS system manager 

NOTE 

A job is a unit of work performed by the CPU. In the VMS operating system environ- 
ment a job is the accounting unit equivalent to a process and subprocess. 

Images come and go, but the process remains until deleted by: 

— The user logging out of the system 

— The process' parent process deletes it 

— The parent process is deleted 

— Invoking one of the following the DCL command: 

STOP process_name 

• STOP/IDENTIFICATION=pid 

• STOP PROCESS/ID=pld 

A job possesses a process structure 

— Arranged in a hierarchical ('1ree") structure 
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Hardware and Software Contexts 

The process hardware context is: 

— The state of the VAX processor at any given moment 

— Specifically the contents of the processor registers 

— What VMS requires to be able to restore a process so it can continue execution at 
exactly the point it was interrupted 

The process software context is: 

— Analogous to the hardware context 

— Identified by a unique process identification number (PID) 

— Accounting information 

— A collection of information about what the process can and cannot do 

Priority 

Privileges 

Resource Limits (Quotas) 

The VMS system manager authorizes the priorities, privileges, and quotas associated with 
a process 



1- 36 Understanding the User Environment 



Virtual Address Space 



Virtual address: 

— A symbolic or logical representation of a physical memory location in hardware 
Virtual address space: 

— Range of virtual addresses referenced by the image 
Virtual memory system: 

— A way for a program to be written as if it had a very large number of contiguous memory 
locations available for use 

• VMS manages the translation of virtual memory addresses to physical memory locations in 
hardware 

— Transparent to the user and program 
Memory management subsystem: 

— Part of the VMS operating system 

— Consists of three components: 

Page fault handler 
Modified page writer 
Swapper 
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Working Sets and Balance Set 

Managing virtual memory: 

— Involves moving pieces (called pages) of the image to and from auxiliary storage 
• Process working set: 

— Pages of physical memory currently used by a process 

— Limited by various working set quotas: 

Working set default 
Working set quota 
Working set extent 

The system balance set: 

— Set of processes whose working sets are resident in physical memory 

— Analogous to the working set of a process 
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Paging 

Page fault: 

— Occurs when an image references a virtual address not currently in the working set 

— Handled by the memory management routine called the page fault handler 
Pages are faulted into the process' working set as the image executes 

— Called paging on demand, or demand paging 
Working set extent: 

— A kind of "overdraft" allowed when a process reaches its working set quota but still 
needs additional pages 

— Managed by the VMS system manager 

— When the working set extent Is reached, the process must sunender pages from the 
working set if additional pages are needed 

Which pages are surrendered are detemiined by the working set list 

— Ordered list of pages in the working set 

— Pages in the list are ordered according to age 

— Oldest page Is surrendered first 

— New pages are appended to the end of the list 
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Free Page List 

List of unused (free) pages available for use by processes 

• An ordered list of pages similar to tiie process worthing set list 

— Oldest pages are at tiie top of tiie list, given to processes wfien tliey request additional 
ps^es 

— Unmodified pages sun-endered by processes are placed at the bottom of the list 
Controlled by the memory management subsystem 

Size of the list can be controlled by the VMS system manager 

• When a process Incurs a page fault for a page previously included in the working set: 

— The page fault handler retrieves the page from either 

The free page list 

The image file (if the page has already been given to another process) 

This procedure is performed for unmodified pages only 
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Modified Page List 

Similar to the free page list, but for modified pages (those written into by a process) 

• Controlled by the memory management subsystem 
When the free page list falls below a certain minimum limit: 

— The modified ps^e writer takss pages away from the modified page ilst and writes them 
into a paging file 

— The pages taken from the modified page Ilst are placed on the free page ilst 

• A paging file: 

— A specially designated file in auxiliary storage 

— Created under the direction of the VMS system manager 

— Used to retain pages removed from the modified page 

— Controlled by the memory management subsystem 

— There can be more than one paging file in a VMS system 

Multiple paging files can improve system perfonnance 

The memory management subsystem manages access between the files 

• When a process incurs a page fault for a modified page: 

— The page fault handler will find the page in one of these locations: 

Modified page ilst 
Free page list 
Paging file 
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Figure 1-18: Pages In Memory and in Auxiliary Storage 
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Scheduling 



• A technique for providing fair sharing of the processor among a number of competing pro- 
cesses 

This function is managed by the WtAS scheduler 

Processes are scheduled for execution using a combination of two techniques: 

— Priority scheduling 

— Time-sliced ("round-robin") scheduling 
Priority levels: 

— Two groups of 16 levels each 

Real-time priority levels (16-31) 
Normal priority levels (0-15) 



Figure 1-19: Priority Levels In VMS 
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Swapping 

The technique used to move entire process working sets from physicai memory to auxiliary 
storage 

— Required to aliow a large number of processes to share the system 

— Not all process working sets can necessarily fit Into the available system memory 

— Managed by the VMS swapper 

— Closely coordinated with scheduling 
The swapping file: 

— A special system file in auxiliary storage 

— Managed by the swapper 

— Created under the direction of the VMS system manager 
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Processor Access Modes 

A mechanism to safeguard memory from: 

— Accidental actions (untested or faulty programs) 

— Malicious actions (reading or writing to memory not owned by the process) 
Four different access modes (in decreasing order of privilege): 

1. Kernel 

2. Executive 

3. Supervisor 

4. User 

A process can change modes during image execution 

— Implicitly, through execution of certain system service routines 

— Explicitly, by executing a VAX change mode instruction 

Requires special privileges, the most common being CMKRNL 
Authorized by the VMS system manager on a per-user basis 
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Figure 1-20: Access Mode Hierarchy 
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Figure 1-21: Layered Design of tlie VMS Operating System 
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System Files, Directories, and Logical Names 
System Files 

• VMS stores its image files, data files, and ottier files in special locations in auxiliary storage: 

System volume Disk volume, which holds system files 

System device Disl< drive on which the system volume is mounted 

System directories Directories on the system volume that store the system 

files (see Table 1-3) 

• A list of all the files distributed in the system directories can be found in the VMS Installation 
and Operations Manual for your particular VAX processor. 

System Directories 

Each system directory has its own logical name, specifying: 

— The system device 

— The specific system directory 

To use the directory name to refer to a file in a system directory, use the logical name 
SYS$SYSROOT as the device name. 

— Defined as a concealed root directory 
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Table 1-3: System Directories 



Directory Name Used 
in Combination with 
SYS$SYSROOT: 



[SYSEXE] 



[SYSLIB] 

[SYSHLP] 

[SYSMSG] 

[SYSMGR] 

[SYSMAINTl 

[SYSTESTI 

[SYSERR] 
[SYSUPD] 



[SYSCBI] 

[SYS$LDR] 

[SYS$STARTUP] 



Logical Name 



SYS$SYSTEM 



SYS$LIBRARY 
SYS$SHARE 

SYS$HELP 

SYS$MESSAGE 

SYS$MANAGER 



SYS$MAINTENANCE 

SYS$TEST 

SYS$ERRORLOG 
SYS$UPDATE 



[SYSUPD.EXAMPLES] SYS$EXAMPLES 



SYS$INSTRUCTION 



SYS$LOADABLE IMAGES 



Principal Contents 



Executable images, user autho- 
rization file, site-independent startup 
and shutdown command procedures, 
system parameter flies, paging file, 
swap file, crash dump file 

Macro libraries, object libraries, share- 
able Image libraries, shareable Im- 
ages 

Help libraries 

Error message files 

Site-specific startup and shutdown 
command procedures, print forms 
definitions, operator's log, account- 
ing file 

Hardware diagnostics (not distributed 
with VMS) 

UETP command procedures, im- 
ages, data 

Error log file 

Command procedures used for sys- 
tem installation, upgrade, and up- 
date 

Sample source programs such as 
device drivers and system services 

Computer-based Instruction soft- 
ware 



SYS$STARTUP 



Loadable executive Images and de- 
vice drivers 

Start-up command procedures 
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Figure 1-22: System Directory Tree Diagram 
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Concealed Root Directories 

Allows flexible handling of multiple versions of VMS on the same system 
The system root directories are of the form: [SYSn] 

— Where "n" Is a single hexadecimal digit from through F 

— A typical VMS system will only have one system root directory: [SYSO] 

Be sure not to mix the use of root directory names and top-level directory names: 
Incorrect: sys$sysroot: [syso.sysexeilink.exe 
Correct: sys$sysroot! [sysexe3link.exe 
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System File and Directory Protection 



System directories distributed witii sufficient protection 

Tlie VMS system manager sliould NOT ciiange tlieir protection 

Be sure you fuily understand thie VMS file protection mechanisms 

— Consult tiie command description for SET PROTECTION in the VMS DCL Dictionary. 

Don't forget you can actually over-protect certain files, usually by accident 
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Software Available for VMS Systems 



Table 1-4: Programs and Utilities Distributed with VMS 



Editors and Word Processing Tools 

^DT SOS interactive Text Editor 

TPU RUNOFF Text Formatter 

EVE SLP Batcii Text Editor 



Program Development Tools 



VAX MACRO Assembler VAX Librarian 

VAX Lini<er VAX Common Run-Time Ubrary 

VAX Debugger 



File Manipulation Tools 
VIVIS COPY Utility 
VI^S DIRECTORY Utility 
ViVIS BACKUP Utility 



Device and Volume Manipulatio n Tools 
VI^S ALLOCATE Utility 
VI^S INITIALIZE Utility 
VIWIS IVIOUNT Utility 



Assorted Utilities 



File Sorting and Merging Utility (SORT/MERGE) Personal Mail Utility (MAIL) 
Information Utilities (SHOW) Telepiione Utility (PHONE) 
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Table 1-5: Optional Programs and Utilities Available for VMS 



Languages 



VAX APL 
VAX BASIC 
VAX BLISS-32 
VAXC 
VAX COBOL 
VAX CORAL 66 
VAX DIBOL 



VAX Code Management System (CMS) 
VAX Language Sensitive Editor (LSE) 
DEC Test Manager (DTM) 



VAXDSM 

VAX FORTRAN 

VAX LISP 

VAX PASCAL 

VAXPL/I 

VAX RPG II 

Professional Host Tool Kit Languages 



Development Productivity Tools 



VAX Module Management System (MMS) 
VAX Source Code Analyzer (SCA) 



Graphics Tools 



VAX ReGIS Graphics Library (RGL) 
VAX DECgraph Plotting Package 



VAX DECslide Graphic Presentation Utility 
VAX Graphics Kernel System (GKS) 



Information and Data Management Products 



VAX Common Data Dictionary (ODD) VAX Forms Management System (FMS) 

VAX DATATRIEVE VAX Tenninai Data Management System (TDMS) 

VAX Database Management System (DBMS) Rdb 



Office Products 



ALL-IN-1 Office Menu 

VAX DECalc Spreadsheet Calculator 

VAX DECspell 



Networl^s and Communications Products 

DECnet-VAX 

DECnet/SNA Gateway Products 
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User Working Environment 



The software working environment (process) established with the User AuthorizaVon Hie 
(UAF) 

Each user has a record in the UAF 

Each process contains various informational parameters, among these: 

— User name 

— Password 

— Account name 

— Process name 

— UiC 

— Process identification number (PiD) 

— Interactive terminal specification (interactive processes only) 

— Default device and directory specification 

Each process also contains various control parameters: 

— Priority 

— Resource limits (Quotas) 

— Privileges 

Many parameters come from the user's UAF record; others are defined or recorded by VMS 
when the user logs in 
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Table 1-6: Parameters that Identify Interactive Processes 



Parameter 



Function 



Syntax/ 
Examples 



Account Name 



Default Device and Di- 
rectory Specification 

interactive Terminal/ 
Specification 

Password 



Process Identification 
Number (PID) 

Process Name 



Identifies a user wiiose com- 
puter usage is combined for 
billing purposes. 

Names the device and direc- 
tory wliere, by default, you 
keep your files. 

Names the terminal you are 
using. 

Confirms your right to log in. 



Identifies your process to the 
operating system. 



1 -8 characters 

CC2E4 

(See MODULE 2) 

DXSK$OSER: [SMITH] 
TXC3 

1-31 characters 

phantom 

8 hexadecimal digits 

000004B3 



identifies your process to other 1-15 characters 
users. 

SMITH 



User identification Code Names the owner of a given 
(UIC) mass storage volume (disl< 

pacl< or tape reel), file, or 
other data staicture; also used 
to name the owner of a given 
process. 



User Name 



Names the record in the user 
authorization file through which 
you have gained system ac- 
cess. 



1-15 alphanumeric characters, or 2 oc- 
tal numbers separated by a comma, 
and enclosed by brackets. When us- 
ing 2 octal numbers, the numbers lie 
between and 37776, and and 1 77776, 
respectively. 

[SMITH] 
[214,377] 

1-12 characters 

SMITH 
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Table 1-7: Parameters that Control Interactive Processes 



Parameter 



Function 



Syntax/ 
Examples 



Priority 



Privileges 



Resource Limits 



Determines how soon oper- 
ations are executed, relative 
to other processes present 
on the system. 

Determines which protected 
system operations you are 
allowed to perform. 



Determines how much of cer- 
tain system resources you can 
consume. 



Decimal integer t}etween and 31 



Refer to the VMS DCL Dictionary ior a 
complete list of privileges. 

OPER 

GROUP 

GRPNAM 

Decimal integers, the range of which 
depends on the parameter. See the 
wCfS DCL Dictionary ior a comprehen- 
sive list. 

Open file quota: 20 
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Example 1-1: Displaying the Values of Your Process Parameters 



$ SHOW PROCESS /ALL 

29-FEB-1988 16:31:45.57 TXB4 : User: SMITH 

Pid: 00000145 Proc. name: SMITH_1 DIC: [ADMIN, SMITH] 

Priority: 4 Default file spec: DISK$USER: [SMITH] 

Devices allocated: TXB4 : 

Process Quotas: 
Account name: PUBLIC 
CPU limit: 

Buffered I/O byte count quota: 
Timer queue entry quota: 
Paging file quota: 
Default page fault cluster: 
Enqueue quota : 
KsiX detached processes: 



Infinite Direct I/O limit: 

4000 Buffered I/O limit: 

10 Open file quota: 

9064 Subprocess quota: 

64 AST quota: 

30 Shared file limit: 

Max active jobs: 



Accounting information: 
Buffered I/O count: 
Direct I/O count: 
Page faults : 
Images activated: 
Elapsed CPU time: 
Connect time : 



18 

18 

19 

2 

22 







176 

47 

1077 

8 

00:00 

00:02:00.50 



Peak working set size: 
Peak virtual size: 
Mounted volumes: 

:05.62 



335 

2210 





Process privileges; 
TMPMBX 
NETMBX 



may create temporary mailbox 
may create network device 



Process rights identifiers: 
INTERACTIVE 
LOCAL 

Process Dynamic Memory Area 
Current Size (bytes) 
Free Space (bytes) 
Size of Largest Block 
Number of Free Blocks 

Processes in this tree: 



25600 Current Total Size (pages) 50 

21744 Space in Use (bytes) 3856 

21712 Size of Smallest Block 8 

3 Free Blocks LEQO 32 Bytes 2 



Bob Smith 
SMITH_1 
$ 
$ 
S 



(*) 



SHOW W0RKIN6_SET 

Working Set /Limit= 200 /Quota= 500 

Adjustment enabled Authorized Quota= 500 



/Extent= 1000 
Authorized Extent^ 1000 
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Learning Aids 



Software documentation 

— Extensive documentation exists for every component of tlie VMS system 

— Places to search wlien ioolting for a particular topic: 

Overview of VMS Documentation 
VI\^S Master Index 

— Otiier major sources of infomnation on VMS and optional software: 

VMS System Software Handt)ook 

VMS Software Product Description (SPD) 

VMS Software Languages and Tools Handbook 

Course offerings 

— DIGITAL offers a wide variety of courses in two formats: 

Lecture/Lab (at DIGITAL facilities or on the customer's site) 
Self-Paced Instaiction (SPI) 

Contact your nearest DIGITAL Customer Training Center or your DIGITAL sales represen- 
tative for more information 
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SUMMARY 

VAX system configurations can be classified as: 

— Single processors 

— Multiple processor configurations 

• A single processor configuration is any single VAX processor and its peripheral devices. 

• There are three types of multiple processor configurations: 

— Tightly coupled configurations - multiprocessors 

— Loosely coupled configurations - networks 

— VAXcluster Systems - configured midway between multiprocessors and networks 
Multiple processor configurations consist of: 

— Processors 

— Interconnects 

^- Peripheral devices 

— Communication devices 

— Transmission media 

— Terminal servers (optional) 
Device names have the form: ddcu 

• A local area network (LAN) spans a limited geographical area. 

• A wide area network (WAN) spans a larger area. 

Important difference between a network and a VAXcluster System: 

— Sharing of information between nodes Is much faster and easier In a cluster due to 
software-synchronized access to shared resources in a cluster 
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Major software components of VMS 

— DCL 

— Processes 

Software context 
Hardware context 
Virtual address space 
Image 

— Memory management subsystem 

Page fault handler 
Modified page writer 
Swapper 

— Sclieduler 

Important memory-related system files 

— Paging files 

— Swap files 

Four processor access modes 

— Kemel 

— Executive 

— Supervisor 

— User 
System directories 

— Contain system files 

— Have system-wide logical names assigned to them 

— Contain subdirectories of the system directory with concealed logical name of SYS$SYSROOT 

— Should be suitably protected to ensure security 



1- 62 Understanding the User Environment 



MODULE 2 
MANAGING SYSTEM USERS 



Managing System Users 2- 1 



INTRODUCTION 

The resources of a single VMS operating systenn are limited. A given configuration lias a fixed 
amount of physical memory and disk storage. It also has a fixed number of peripheral devices. 
All system users must share these resources. 

VMS restricts each user's access to system resources. By controlling these restrictions, the 
system manager can promote fair and effective resource sharing. 

VMS also restricts each user's ability to affect other users and VMS itself. The system manager 
and Individual users can maintain system security by controlling these restrictions. 

The principal VMS features that regulate individual processes are: 

Priority 

Privileges 

Limits 

Disl< quotas 

Protection 

Access mode 

To define restrictions on individual user processes and to record system activity, the system 
manager uses certain VMS utilities and DCL commands. These utilities and commands create 
and maintain the following files, which are discussed in this module: 

. User authorization file (SYS$SYSTEM:SYSUAF.DAT) 

• Quota files on disk volumes ([000000]QUOTA.SYS) 

• Login files (for example, SYS$MANAGER:SYLOGIN.COM) 

The system manager or operator must also respond to requests for assistance and send mes- 
sages to users. The manager uses several utilities, including the MAIL and PHONE utilities, to 
accomplish this. 
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OBJECTIVES 

To divide limited system resources among users and processes, a system manager should be 
able to: 

Identify the relationships between process characteristics and the information stored in UAF 
records. 

Add a user account to the system by creating the necessary user authorization records, 
directories, and disk quotas. 

Remove a user account from the system. 

Regulate the use of system resources. 

Regulate processes running on the system. 

Restrict the abilities of certain users or applications. 

Communicate with system users and operators. 



RESOURCES 

The following publications are referenced in this module: 

1 . VMS DCL Dictionary 

2. VMS System Manager's Manual 

3. Guide to Setting Up a VMS System 

4. Guide to Maintaining a VMS System 

5. VMS SYSMAN Utility Manual 

6. VMS Authorize Utility Manual 

7. Guide to VMS System Security 
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DEFINING THE USER ENVIRONMENT 
User Authorization File (UAF) 

• Users are identified on VMS systems by user names 

The system manager defines user names in ttie user authorization file (UAF) 
User name records are often called accounts 
Eachi UAF record consists of a number of fieids: 

— User name 

— Encoded password 

— Default device and directory 

— Access restrictions 

— Quotas and limits 

— Privileges 

— UIC and identifiers 

The system manager can modify any record field 

Field values should reflect the needs of users and system resources 

The AUTHORIZE utility is used to manage the UAF: 

— Specifies who may use the system 

— Defines the user's default device and directory 

— Limits the amount of space in memory for each user 

— Permits interaction between users by establishing groups 

— Runs a command procedure for any user at login time 

— Limits the number of files a user may have open at any one time 

— Sets limits on other resources 



Managing System Users 2- 5 



Example 2-1: UAF Record 



$ SET DEFAULT SYS$SYSTEM 
$ RON AUTHORIZE 
UAF> SHOW SMITH 



1 Dsername: 

3 Account ; 

5 CLI: 

7 Default : 

8 L6ICMD: 



SMITH 
JllMGT 
DCL 

WORKl: [SMITH] 
SYS $MRNA6ER : 6RP 1 1L06IN 



2 Owner: MARY SMITH 
4 DIC: [11,200] ( [JllMGT, SMITH] ) 
6 Tables: DCLTABLES 



9 Login Flags: Dlswelcome Dlsnewmall 
10 Primary days: Mon Tue Wed Thu Fri 
Secondary days : 

Primary 000000000011111111112222 
Day Hours 012345678901234567890123 

Network: *4****t#t* 

Batch: *«*«##t#t# 

Local: ##««t Full access «t4*** 

Dialup: *«*#f*##t# 

Remote: ***#««f#«f 



Sat Sun 
Secondary 
Day Hours 



Expiration: (none) 

Pwdlifetime: 180 00:00 
Last Login: (none) 

llMaxjobs: Fillm: 

Maxacct jobs: Shrfillm: 

Maxdetach: BlOlm: 

Prclm: 2 DIOlm: 

Prio: 4 ASTlm: 

Queprio: 4 TQElm: 

CPU: (none) Enqlm: 



Fwdminimum: 
Pwdchange : 
(interactive) , 
20 Bytlm: 





6 

6 

10 

10 

10 



Pbytlm: 
JTquota : 
WSdef: 
WSquo: 
WSextent : 
Pgflquo: 



000000000011111111112222 
012345678901234567890123 

No access 

— No access 

t***# Full access **«««* 

No access 

No access 

6 Login Fails: 
(pre-expired) 

(none) (non-interactive) 

4096 



1024 

150 

200 

500 

10000 



12 Authori zed P r ivi leges : 
GROUP TMPMBX NETMBX 
Default Privileges: 
TMPMBX NETMBX 

OAF> EXIT 

%0AF-I-N0M0DS, no modifications made to system authorization file 

%0AF-I-NAFHOM0DS, no modifications made to network authorization file 

%0AF-I-RDBN0M0DS, no modifications made to rights database 

$ 

$ 
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Table 2-1: Fields in a UAF Record Usually Unique to Each User 



Field l\^eaning 



AUTHORIZE 
Qualifier 



Keyt 



User Name Identifies user for whom VMS creates process. 
Typed in response to Username: prompt. 

Password Confirms identity of user. Typed in response to 
Password: prompt. Note that it is possible to create 
an "OPEN" account by specifying a null password 
(/PASSWORD=""). The password: prompt is not 
output for OPEN accounts. 

UIC Used to enforce protection of devices, volumes, 

and files. Also used to regulate ability of process 
to communicate with and affect other processes. 
(UIC may be displayed in a numerical or character 
string fomi.) 

Owner Records full name of user, for convenience of the 
system manager. Not used by VMS. To allow 
spaces in the name, enclose it in quotation marks. 

Default Used by VMS to establish both initial default device 
and initial default directory at login time. 

Note that it is preferable to identify the default de- 
vice by a logical name based on the volume label 
(such as W0RK1) rather than by a physical device 
name (such as DUA1). 



User name is a pa 
rameter, not a qua! 
ifier. 

/PASSWORD 



I- 1 



/OIC 



/OWNER 



/DEVICE 
/DIRECTORY 



tRefer to Example 2-1 for key numbers. 
IrNot displayed, to preserve integrity. 
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Table 2-2: Fields In a UAF Record Usually Common to Groups of Users 



Field 



Meaning 



AUTHORIZE 
Qualifier 



Keyt 



Account 



CLI 
Tables 



LGICMD 



Login flags 



Primary 
days 

Secondary 
days 



Limits 



Privileges 



Used by ACCOUNTING utility to identify processes 
whose activities are billed in common. To include 
spaces in the account name, enclose it in quotation 
marks. 

Command language interpreter. Usually, DCL. 

Specifies which CLI table the process will use. 
(Create a new CLI table by using the Command 
Definition utility to copy an existing CLI table. Then 
use the same utility to modify the new table by 
removing or adding commands to it.) 

Specifies a system-wide or group-wide login com- 
mand file. Commands in this file are executed before 
the user can issue commands interactively or througji 
a batch command file. The manager typically assigns 
the same login file to all members of a group, or to 
all users on the system. (If this field is left blank, 
VMS executes the LOGIN.COM file in the user's 
default diiectoty before executing user commands.) 

Special restrictions during and after logging in to Ae 
system. 

Access allowed during sfiecific times and days, and 
with specific access modes. 



Used to restrict use of various resources by process. 



Privileges to add to user record or remove from user 
record. Default privileges are given to user at login. 
Authorized privileges are given when user enters SET 
PROCESS/PRIVILEGE command. 



/ACCOUNT 



/CLI 
/CLITABLES 



5 

6 



/LGICMD 



/FLAGS 



/ACCESS 

/PRIMARY 

/INTERACTIVE 

/NETWORK 

/BATCH 

/LOCAL 

/DIALOP 

/PJIMOTE 

One qualifier for each limit. 
For example: 

/TQELM 
/ASTLM 

/PRIVILEGES 
/DEFPRIVILEGES 
(Qualifiers have a keyword for 
each privilege. For example, 
GRPNAM (to add this priv- 
ilege) and NOGRFNAM (to 
delete it). 



10 



11 



12 



tRefer to Example 2-1 for key numbers. 
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AUTHORIZE Utility 



standard UAF file shipped with VMS 

— SYS$SYSTEM:SYSUAF.DAT 
Contains four DIGITAL-supplied UAF records: 

— SYSTEM 

— FIELD 

— SYSTEST 

— DEFAULT 



Table 2-3: Standard User Records In the User Authorization File 



User Name (and 
initial Password) 
of UAF Record 



Purpose of This Record 



SYSTEM (MANAGER)! 



SYSTEST (UETP)2 

FIELD (SERVICE)2 
DEFAULT (USER)1 



For software installation, system bootstrapping, and system 
problem diagnosis. 

Do not log In as SYSTEM for routine system management 
functions. There are too many dangerous privileges, particularly 
BYPASS. Create a UAF record with UIC [1,4] and SETPRV, 
but without dangerous privileges, to use for routine system 
management functions. NOTE: You should substitute the 
READALL privilege for BYPASS. 

Runs the User Environment Test Paci^age (UETP), which tests 
VMS hardware and software 

Runs hardware diagnostics 

Not possible to log in as DEFAULT. 

The AUTHORIZE command ADD uses this record to supply 
default values for new UAF records. 



' These records are present whenever a UAF is created They cannot be removed or renamed. The password of 
DEFAULT cannot be changed. System security requires that you change the password of SYSTEM. 

^ These records arc present in the UAF that is distributed with VMS. It is possible to remove them, but removal 
is not recommended. System security requires that you change the passwords of SYSTEST and FIELD. 
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Table 2-4: Starting the AUTHORIZE Utility 



Step DCL Commands 



Comments 



1 Log in as SYSTEI^ 



2 $ SET DEFAULT SYS$ SYSTEM 



3 $ RUN AUTHORIZE 



You need to be in a system account (group number 
0-10) to run the AUTHORIZE utility. To accomplish! 
this, log in using the SYSTEM user name or another 
user name that specifies a system UAF record, or give 
yourself the SYSPRV privilege while in a nonsystem 
process. The SYSPRV privilege allows you to do the 
same things you can do In a system process. 

The AUTIHORIZE utility always manages the 
SYSUAF.DAT file stored In the current default di- 
rectory for your process. To affect the system-wide 
UAF file, SYS$SYSTEM:SYSUAF.DAT, set your default 
to SYS$SYSTEM. 

If the SYSUARDAT file does not exist, AUTHORIZE 
asl<s whether you want to create a SYSUAF.DAT. If you 
answer "yes," it creates one. 

If you know SYS$SYSTEM:SYSUARDAT really does 
exist, answer "no." Then: 

1 . Make sure that the system logical name SYSUAF 
points to SYS$SYSTEM:SYSUAF.DAT, if the 
logical name exists. The module Customizing 
the System discusses how to display and modify 
system logical names In more detail. 

2. Follow steps 1-3 again. 
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Table 2-5: Summary of AUTHORIZE Commands 



Command Function 



ADD Add a user 

MODIFY Modify a user record 

REMOVE Remove a user 

RENAME Rename a user record 

COPY Copy one user record to another 

LIST Create a file of user names that can be printed 

SHOW Display user records 

HELP List commands and qualifiers available 

EXIT Return to DCL 
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Figure 2-1 : Adding and Using a UAF Record 

^^ 



$ set default sys$system 
$ run authorize 
uaf>add smith- 
uaf> /password=secret 
Daf>exit 

$ 




system manager 



USER AUTHORIZATION FILE 
SYS$SYSTEM:SYSUAF.DAT 



RECORD: USER NAME SMITH 




Username: SMITH 

Password: 

Welcome to VAX/VMS V5.0 

$ 




USER SMITH 



TTB X0472 88 
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Table 2-6: Managing the User Authorization File with the AUTHORIZE Utility 



Operation on the UAF 



Command Format and Examples 



Displays the complete UAF record for 
account JONES on your terminal. 

Displays an abbreviated list of all accounts 
in the UAF file on your terminal. 

Displays an abbreviated list on your 
terminal of all accounts starting with the 
letter "B." 

Writes a brief list of all accounts to the file 
SYSUARLIS. 

Writes a list of complete values for all 
accounts starting with the letter "B" to the 
file SYSUARLIS. 

Adds a new user record, copying all 
values not specified by qualifiers from 
the DEFAULT record {If the /PASSWORD 
qualifier is omitted, the password "USER" 
is supplied.) 

Adds a new user record, copying all 
values (except password) not specified by 
qualifiers from an existing user record (You 
must specify the password, even if it is to 
remain the same.) 

Modifies an existing user record. 

f^odifies all existing user records. 

Modifies all existing user records with the 
same group UIC. 

Renames an existing user record (You 
must specify the password, even if it is to 
remain the same.) 

Modifies the DEFAULT record (The qualifier 
/PASSWORD does not affect the default 
password, which is always "USER.") 

Removes an existing user record. 



UAF> SHOW user-name 
UAF> SHOW JONES 

UAF> SHOW/BRIEF * 



UAF> SHOW/BRIEF B* 



UAF> LIST user-name 
UAF> LIST * 

UAF> LIST/FULL B* 



UAF> ADD new-user-name [/qualifier. 
UAF> ADD SMITH /PASSWORD=SECRET 



UAF> COPY existing-user-name new-user-name - 
_OAF> /PASSW0RD=pa33Word [/qualifier] [, . . .] 
OAF> COPY SMITH JONES /PASSW=FRANK 



UAF> MODIFY user-name /qualifier [, . • . ] 
UAF> MODIFY SMITH /DEVICE=WORKDISK 

UAF> MODIFY * /qualifier [,...] 
UAF> MODIFY * /PRCLM=5 

OAF> MODIFY [group-number, *] /qualifier [,...] 
OAF> MODIFY [310,*] /LGICMD=GRP3 10 : LOGIN. COM 

UAF> RENAME existing-user-name - 

_UAF> new-user-name /PASSWORD=password 

DAF> RENAME PRAOSS MASON /PASSWORD=JAR 

UAF> MODIFY DEFAULT /qualifier [, . . .] 

UAF> MODIFY DEFAULT - 

_UAF> /DEV=DISK_SCRATCH /DIR= [GUEST] 

UAF> REMOVE user-name 
UAF> REMOVE MASON 
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The AUTHORIZE utility lists UAF records alphabetically by user name. 



Example 2-2: Brief List of UAF Records 



$ SET DEFAULT SYS$SYSTEM 

$ RUN AUTHORIZE 

UAF> LIST 

%UAF-I-LSTMSG1, writing listing file 

%UAF-I-LSTMSG2, listing file SYSUAF.LIS complete 

UAF> EXIT 

%UAF-I-NOMODS, no modifications made to system authorization file 

%OAF-I-NAFNOMODS, no modifications made to network authorization file 

%UAF-I-RDBNOMODS, no modifications made to rights database 

$ 
$ 
$ TYPE SYSUAF.LIS 



Owner 



Username 



UIC 



Account Privs Pri Default Directory 



JO ANN ALBERT 


ALBERT 


[21,5] 




Normal 


4 


WORKl: [AT.RERT] 


BOB CAMPBFJ.T. 


CAMPBELL 


[101,25] 




Normal 


4 


W0RK2: [CAMPBELL] 


NANCY CLARK 


CLARK 


[11,20] 




Normal 


4 


WORKl: [CLARK] 


DECNET 


DECNET 


[240,240] 


NETWORK 


Normal 


4 


SYS$SYSDEVICE ! [DECNET] 


JOHN DOE 


DOE 


[370,64] 


J65 


Normal 


4 


CLASS DISK: [PAYROLL. DOE 64 


FIELD SERVICE 


FIELD 


[1,10] 


SYSTEM 


All 


4 


SYS$SYSROOT: [SYSMAINT] 


PETER HARBO 


HARBO 


[31,7] 




Normal 


4 


WORKl : [HARBO] 


SYSTEM DEFAULT 


JONES 


[200,200] 




Normal 


4 


WORKl ! [USER] 




LIGHT 


[101,110] 




Normal 


4 


WORK2: [LIGHT] 




ROGERS 


[21,210] 




Normal 


4 


WORKl: [ROGERS] 


SYSTEM DEFAULT 


SEMINAR 


[53,1] 




Normal 


4 


W0RK2: [SEMINAR] 


MARY SMITH 


SMITH 


[11,200] 


J26MGT 


Group 


4 


WORKl: [SYSMGR] 


SYSTEM MANAGER 


SYSTEM 


[1,4] 


SYSTEM 


All 


4 


SYS$SYSROOT: [SYSMGR] 


SYSTEST-UETP 


SYSTEST 


[1M7] 


SYSTEM 


All 


4 


SYS$SYSROOT: [SYSTEST] 




HALDMAN 


[31,310] 




Normal 


4 


WORK2 : [WALDMAN] 
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Creating a User Account 



• Creating accounts for your user environment requires advanced considerations: 

— Variety of user categories 

— Security and sliaring 

— Management of auxiliary storage (disks) 

Preparing to Create the Account 

Primary considerations when going to add a new user: 

— How should the user be categorized? 

— Where should the user's disk files reside by default? 

When the user's requirements are understood, determine nondefault field values: 

— User name and password 

— User Identification code (UIC) 

— Default device and directory 

— Special resource quotas 

— Additional security parameters 

— Login command procedures to be executed 
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Creating the Default Disk Directory 

When a user logs in, VMS uses the UAF record to define the default device and directory 

— Called the user file directory (UFD) 

— Usually named similar to the user name 

— The logical name SYS$LOGIN created to point to the UFD 
AUTHORIZE does not create the default directory 

— System manager creates the default directory using DCL commands (or a DCL 
procedure) 

Each disk volume contains a master file directory (MFD) 

— The "top-level" directory on the volume 

— Contains UFDs (and possibly other files) 

A corresponding entry In the volume's disk quota file must be created 

— Only If disk quotas are enabled on the volume 

Setting the Disk Quotas 

The System Management (SYSMAN) Utility contains DISKQUOTA commands 

— Creates and maintains disk quota files 

— Assigns disk quotas to users 

— Monitors disk usage 

SYSMAN performs operations on the device name by the /DEVICE qualifier 
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Table 2-7: Creating a User's Default Directory or Other UFD 



Step Commands 



1 



$ SET DEFAULT volume-name 



$ CREATE/DIRECTORY - 

_$ /OWNER=uic uf d-name - 

_$ /PROTECTION=(prot-inask) 



S DIR volume-name : [000000] 



Comments 



If the volume is not mountGd, follow the in- 
structions for mounting it in MODULE 4. Use 
the name of the device where the voiume Is 
loaded or the logical name of the volume for the 
volume-name part of this command. More de- 
tailed information on device names and volumes 
are presented in MODULE 4. 

The UIC supplied with the /OWNER qualifier 
should be the user's own UIC, as recorded In 
the UAF. A user should always own a private 
UFD (one that is not shared with anyone else). 
The /OWNER qualifier requires SYSPRV. (See 
Figure 2-2) 

NOTE: Users may not create their own UFD 
unless they have write access to the Master File 
Directory (MFD) for the volume. Also, be sure 
to protect the new UFD with the appropriate 
protection mask. 

List the contents of the MFD to check that you 
did create a User File Directory in it, or set your 
default to [000000] on the volume and list the 
name of the directory as shown In Figure 2-2. 
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Figure 2-2: Creating a User File Directory (UFD) 



$ SET DEFAULT DISK$DATA 

$ CREATE/DIRECTORY- 

_$/OWNER_UIC=[11,2l- 

_$(SMITH] 

$ SET DEFAULT [000000] 

$ DIR SMITH. DIR 




MASTER FILE DIRECTORY 
[000000]OOOOOO.DIR 



SYSTEM MANAGER 



USER FILE DIRECTORIES 
ON VOLUME DISK$DATA 



[00000O]SMITH.DIR 



USER FILE 
[SMITHJFILE.DAT 



Username: SMITH 
Password: 

Welcome to TIDE 

$ 

$ EDIT [SMITHJFILE.DAT 





USER WITH UFD [SMITH] ON DISK$DATA 



TTB X0473 86 
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Table 2-8: Basic Steps to Add a New User to the System 



Commandt 



Comments 



$ SET DEFAOLT SYS$SYSTEM 

$ RUN SYSMAN 

SYSMMI> DISKQOOTAADD [11,15] - 

_SYSMAN> /DEVICE=DISK$DSER /PERMQOOTA=200 

_SYSMAN> /OVERDRAFT=50 

$ RUN AUTHORIZE 

UAF> ADD SMITH/PASSWORD=PERCHANCE - 
_UAF> /DEVICE=DISK$USER/DIRECTORY= [SMITH] 
UAF> /OIC= [ADMIN, SMITH] 



UAF> EXIT 

$ CREATE/DIRECTORY USERl: [SMITH] - 
_$ /OWNER= [ADMIN, SMITH] - 
$ /PROTECTION=(S:RWED,0:RWE,G:RE,W:E) 



Set your default disk directory to tlie system 
directory in whicii SYSUAF.DAT resides. 

involve tlie System Management (SYS- 
MAN) utility to assign the user disk quota. 



invoke ttie AUTHORIZE utility. 

Add the new account SMiTi-i, using the 
default UAF record values for those fields 
not specified in the ADD command. ADMIN 
and SMITH identifiers should exist in order 
for /UIC qualifier to work. 

Exit from the AUTHORIZE utility and return 
toDCL. 

Create the user's default disk directory 
on the default device as specified when 
the UAF record was created. Note that 
the disk directory can be created before 
the UAF record is created. The protection 
mask given to the new directory is only an 
example; the exact protection mask should 
reflect your particular system's security 
policy. 



tYou must be logged in to either the SYSTEM account or an account with the SYSPRV privilege enabled. 
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steps for Adding a User 



Example 2-3: Adding a System User 

$ 

$ SET DEFAULT SYS$SYSTEM 

$ RUN SYSMAN 

SYSMAN> DISKQOOTA ADD [11,15] /DEVICE=DISK$OSER /PERMQOOTA=500 /OVERDRAFT=100 

SYSMAN> EXIT 

$ 

$ CREATE/DIRECTORY /0WNER_0IC=[11, 15] DISK$USER: [BROWN] 

$ 

$ RUN AUTHORIZE 

UAF> ADD BROWN /PASSWORD=ENIGMA /UIC=[11,15] - 

_UAF> /DEVICE=DISK$USER /DIRECTORY=[ BROWN] - 

_UAF> /OWNER="Mary Brown" /ACCOUNT=GRP 1 1 

%UAF-I-ADDMSG, user record successfully added 

%UAF-I-RDBADDMSGU, identifier BROWN value: [000011,000015] added to RIGHTSLIST.DAT 

UAF> EXIT 

%UAF-I-DONEMSG, system authorization file modified 

%UAF-I-RDBDONEMSG, rights database modified 

$ LOGOUT 

(Now try logging into the new BROWN account) 

Username : BROWN 
Password: 

Welcome to VMS Version 5.0 

$ SHOW PROCESS 

17-NOV-1988 14:23:22.80 TTCl: User: BROWN 

Pid: 00001231 Proc. name: BROWN UIC: [GRPll. BROWN] 

Priority: 4 Default file spec: DISK$USER: [BROWN] 

Devices allocated: TTCl: 

$ 

$ SHOW DEFAULT 

DISK$USER: [BROWN] 

$ 

$ SHOW QUOTA 

User [BROWN] has 6 blocks used, 494 available, of 500 
authorized and permitted overdraft of 100 blocks on DISK$USER 

$ 

$ 
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Modifying the DEFAULT Record 

The AUTHORIZE ADD command is similar in function to the COPY command. 

— Simulates copying of the DEFAULT record for the new user. 

• The DEFAULT record is used as a template to specify most field values. 

— The password field should always be specified when using the ADD command. 
Modify the DEFAULT record to reflect typical user account requirements. 

Tailoring User Accounts 

UAF record fields fall into four basic categories: 

1. Identification and environment 

2. Access and security 

3. Quotas and resource limits 

4. Privileges 
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Example 2-4: UAF Record Field Categories 



Username: SMITH 

Account! JllMGT 

CLI ! DCL 

Default : WORKl : [ SMITH] 

LGICMD : SYS $MftNAGER : GRP 1 ILOGIN 

Login Flags: Diaweloome Disnewmail 

Primary days: Mon Tuo Wed Thu Fri 

Secondary days : Sat Svm 

Primary 000000000011111111112222 Secondary 

Day Hours 012345678901234567890123 Day Hours 

Network : #«******## 

Batch: #*««#*#*«*- 

Local: ##### Full access «##### 

Dialup: #**##*#*t* 

Remote: ###«####«« 

Expiration: (none) 

Pwdlifetime; 180 00:00 

Last Login: (none) 

Maxjobs: Fillm: 

Maxacct jobs: Shrfillm: 
Maxdetach: BlOlm: 6 

Prclm: 2 DIOlm: 6 

Prio: 4 ASTlm: 10 

Queprio: 4 TQElm: 10 

CPU: (none) Enqlm: 10 

Authorized Privileges: 

GROUP TMPMBX NETMBX 
Default Privileges: 

TMPMBX NETMBX 



Owner: MARY SMITH 
UIC: [11,200] ([JllMGT, SMITH]) 
Tables: DCLTABLES 



Pwdminimum: 
Pwdchange : 
(interactive) , 
20 Bytlm: 
Pbytlm: 
JT quota: 
WSdef : 
WSquo: 
WSextent 
Pgflquo: 



000000000011111111112222 
012345678901234567890123 

No access 

No access 

*#«#f Full access «#tt## 

No access 

No access 

6 Login Fails: 
(pre-expired) 

(none) (non-interactive) 

4096 



1024 

150 

200 

; 500 

10000 



Notes on Example 2-4 

In Example 2-4, each of the following field categories are grouped together, starting with a 
numbered Identifier: 

1 identification and environment fields 

2 Acc^ess and security fields 

3 Quotas and resource limits fields 

4 Privileges fields 
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Identification and Environment Fields 

• Certain UAF record fields are used for: 

— Accounting 

— User identification 

— Environment initialization 



Table 2-9: AUTHORIZE Qualifiers for Identification and Environment Fields 



Qualifier 



/ACCOONT=account -name 

/CLI=cli-name 

/CLITABLES-t able-name 

/DEVICE=deviee-name 

/DIRECTORY 

/L6ICMD=£lle-spec 

/OWNER=owner-name 
/OIC=uic 



Function 



A 1 to 8 alptianumeric ciiaracter string identifying the account. 

Name of the default command language Interpreter. 

Specifies user-defined CLI tables for the account. 

Specifies the default disk device at login. 

Specifies the default disk directory at login. 

Specifies the name of the login command procedure to be 
executed after the system-wide login procedure is executed (if 
one exists). 

Specifies a 1 to 31 character string identifying the owner of the 
account. 

Specifies the user identification code (UIC) for the account. 
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Login Command Procedures 

Define the user environment using login command procedures 

— Systenn-wlde login command procedure 

— Other login command procedures {created by system manager or user) 

Login command procedures are executed each time an interactive process or batch Job is 
created 

VMS finds these command procedures in: 

— System logical name SYS$SYLOGiN (system-wide procedure) 

— LGiCMD field in each user's UAF record 

— Default user login file L0GIN.COM 

VMS login command procedure execution sequence: 

— If SYS$SYLOGiN defined, execute command file it designates 

— If LGICMD contains name of command procedure, execute it 

— if LGICMD b\ark, execute SYS$LOGIN:LOGIN.COM 
Four common uses of login command procedures: 

— Personal login only 

— System and personal login 

— System and group login 

— Captive login 
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Table 2-10: Typical Login Command Procedures (DCL) 



Function of Login Command Files 



Definition of System 

Logical Name SYS$SYLOGIN 

and UAF 

Record Field LGICMD 



Personal login only: 

DCL users create the file L0GIN.COM in their own login 

default directories to customize their own environments. 

System and personal login: 
The system manager creates the DCL command file 
SYS$MANAGER:SYLOGIN.COM to customize a com- 
mon user environment for all users on the system, and 
users each create a file, L0GIN.COM, in their own login 
default directories to customize their own environments. 

System and group login: 

The system manager creates the DCL command file 
SYS$MANAGER:SYLOGIN.COM to customize a com- 
mon user environment for all users on the system, and 
group managers create a DCL command file to customize 
a common user environment for all users in their group. 

Captive login: 

The system manager creates a file in the SYS$MANAQER 
directory, such as SYS$IVIANAGER:CAPTIVE.COM, to 
customize the user environment and prevent a user from 
changing it. Typically, the command procedure examines 
each DCL command the user enters, to decide whether 
or not to allow it to be executed. It may even implement 
a private command language for the user. Turnkey ac- 
counts may also use the captive login method. Typically, 
more than one person uses a turnkey account. When 
users log in to a tumkey account, the login procedure 
runs a program for them, and they communicate with that 
program. Normally, a user of a turnkey account never 
sees the DCL prompt (see Example 2-5). 



SYS$SYLOGIN undefined 
LGICMD undefined 

SYS$SYLOGIN defined as 
SYS$MANAGER:SYLOGIN 

LGICMD undefined 



SYS$SYLOGIN defined as 
SYS$MANAGER:SYLOGIN 

LGICMD defined as the file cre- 
ated for the group that the user 
belongs to (see Example 2-4). 

SYS$SYLOGIN definition optional; 
affects captive and non-captive 
users. 

LGICMD contains the name of 
a captive command procedure, 
such as 

SYS$MANAGER:CAPTIVE, or a 
logical name translating to the cap- 
tive command procedure name. A 
captive command procedure must 
contain a loop to prevent it from 
exiting, and the FLAGS field of 
the UAF record must specify the 
CAPTIVE, DISCTLY, and LOCK- 
PWD flags. Table 2-13 discusses 
the FLAGS field of the UAF record 
further. 
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Example 2-5: Using a Turnkey Account 

Username : SPECULATE 
Password: 

Welcome to SPECULATE 

Speculate> USE INVESTMENT DATA 

Spec: Consider it done. 

Speculate> COMPUTE FOR NEXT 10 YEARS 

SPEC: Please specify commodity. 

Speculate> GOLD 

Spec: $933,999,456,657.32 

Speculate> 



(User continues to interact with tlie SPECUI^TE program) 



Speculate> BYE 

SPECULATE logged out at 20-001-1983 16:00:15.16 
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Access and Security Fields 

Used to limit the use of the account according to time/day or access mode 
Used to limit certain capeOsilities once logged Into the system 

• Used to authenticate user requests for access to files and other resources 

Access Times and Modes 

• You can limit an account's access to the system in three ways: 

— Time of the day 

— Day of the weelt 

— Access mode 

• You can coml>lne these values to further specify the account's ability to gain access to the 
system: 

OAF> MODIFY SMITH/LOCAL" (PRIMARY, 8-17, SECONDARY, 8-17) 
UAF> MODIFY SMITH/DIALDP= (PRIMARY, 17-8, SECONDARY, 17-8) 
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Table 2-11: Login Access Modes 



Mode 



INTERACTIVE 

LOCAL 

DIALUP 

REMOTE 

BATCH 

NETWORK 



Description 



Any kind of interactive login 

Directly connected terminals (no LATs or modems) 

Modem connections using telephone services (or network services 
emulating telephone services) 

Virtual terminal connection across DECnet 

Batch jobs (noninteractive access method) 

DECnet noninteractive network access, for example: file transfers, 
electronic mail to/from other nodes, etc. 



Table 2-12: AUTHORIZE Qualifiers for Access Fields 



Qualifier 



/ACCESS [= (range [,...]) 
/BATCH [= (range [,...]) 
/DIALOP [= (range [,...]) t 
/INTERACTIVE [= (range [,...]) 

/LOCAL [= (range [, . . .] )t 

/PRIMEDAYS= ( [NO] day [,...]) 



/NETWORK [= (range [, . . . ] ) 
/REMOTE [= (range [/•••])! 



Function 



Specifies the hours of access for ail modes of access. 

Specifies hours of access permitted for batch jobs. 

Specifies hours of access permitted for dialup jobs. 

Specifies hours of access permitted for interactive 
logins. 

Specifies hours of access permitted for interactive logins 
initiated on local terminals. 

Specifies the primary and secondary days of the week 
for logins. Specify primary days as MON, TUE, WED, 
THU, FRI, SAT, and SUN. Specify secondary days as 
NOMON, NOTUE, MOWED, etc. 

Specifies hours of access permitted for network batch 
jobs. 

Specifies hours of access permitted for interactive logins 
initiated by network remote terminals. 

tThese are interactive logins, so you can use the /INTERACTIVE qualifier to specify all three interactive access 
methods. 
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Login Flags 

Login flags are used to restrict certain activities of the user job. 



Table 2-13: Login Flag Parameters 



/FLAG Parameterf 



AUDIT 

AUTOLOGIN 

CAPTIVE 

DEFCLI 

DISCTLY 

DISFORCE_PWD_CHANGE 

DISMAIL 

DISMEHMAIL 

DISRECONNECT 

DISREPORT 

DISUSER 

DISWELCOME 

GENPWD 

LOCKPWD 

PWD_EXPIRED 

PWD2 EXPIRED 



Purpose 



Audits all security-relevant actions 

Restricts this account to autologins only 

Prevents user from changing any defaults at login 

Prevents user from changing default CLI or CLI table 

Disables CTRLA' Intermpts 

Disables forced user expired password changes 

Prevents mail delivery to this user 

Suppresses "New rwlail..." announcements 

Disables automated reconnectlons 

Disables time of last login and other security reports 

Disables this account completely 

Suppresses "Welcome to..." login message 

Requires user to use generated passwords 

Prevents user from changing password 

Marks password as expired 

Marks second password as expired 



tAny flag can be prefixed with "NO" to turn off the flag's intended purpose, for example: /NOLOCKPWD 
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Security Fields 

Security fields are used to authenticate user requests for access to files and otiier resources 



Table 2-14: AUTHORIZE Qualifiers for Security Fields 



Qualifier 



Function 



/ADDIDENTIFIER 

/EXPIRATION=time 
/GENERATE_PASSWORD [=keyworcl] 

/MOD IFY_IDENTIFIERS 

/PASSWORD" (pwdl [ , pwd2 ] ) 
/PWDEXPIRED 

/P WDLIFET IME="t ime 

/PWDMIMIMUM-value 

/REMOVE IDENTIFIER 



Adds identifiers for the user name and account name to 
the rights database. 

Expiration date and time of the account. 

Invokes the password generator to generate user 
passwords. Details of the possible keywords are 
discussed in the module Maintaining System Integrity. 

Specifies whether the identifier associated with a user 
record Is to be modified in the rights database. 

Specifies the primary and optional secondary passwords. 

Specifies whether a password is valid only for the first 
login. 

Specifies the length of time a password is valid, entered 
as a delta-time value. 

Specifies the minimum number of characters allowed 
for a password. 

Specifies whether the user name and account name 
identifiers should be removed from the rights database 
when the UAF record Is removed from SYSUAF.DAT. 
Works only for the REMOVE command. 
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Quotas and Resource Limits 



Table 2-15: AUTHORIZE Qualifiers for Quota Fields 



Qualifier 



Function 



/ASTIM=value 
/BIOIJ*=value 

/BYTLM=value 

/CPOTIME=tiine 

/DIOIiM=value 

/ENQLM=value 
/FILLM=value 
/JTQUOTA=value 

/MAXACCTJOBS=value 

/MftXDETACH=value 
/MAXJOBS=value 

/PGFLQDOTA"value 

/PRCLM=value 

/PRIORITY=value 
/SHRFILI<M=value 

/TQEIj»=value 

/WSDEFAOLT=value 

/WSEXTENT=value 

/WSQUOTA=value 



Number of ASTs the user can have queued at any one time. 

Maximum number of buffered I/O operations the user can have 
outstanding at any one time. 

Maximum number of bytes of nonpaged system dynamic memory 
that the user's job may consume at any one time. 

The maximum CPU time a user's process can take per session, 
specified as a delta-time value. 

Maximum number of direct I/O operations (usually disk) that the 
user can have outstanding at any one time. 

Maximum number of locks that can be queued at any one time. 

Maximum number of files that can be open at one time. 

The initial maximum number of bytes with which the job-wide 
logical name table is to be created. 

Maximum number of batch, interactive, and detached processes 
that may be active at any one time for all users of the account. 
The default value of represents an unlimited number. 

Maximum number of detached processes allowed at any one time. 

Maximum number of batch, interactive, detached, and network 
processes that may be active at any one time. 

Maximum number of pages the user's process can use in the 
system paging files. 

Maximum number of subprocesses that can exist at one time for 
the user's process. 

The default base priority for all processes created by the user. 

Maximum number of shared files the user may have open at any 
one time. 

Total number of entries in the timer queue, plus the number of 
temporary common event flag clusters the user can have at any 
one time. 

The number of pages in the user's default working set. 

The number of pages in the user's working set extent. 

The number of pages in the user's working set quota. 
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Privileges 

Two sets of privileges are specified in each UAF record: 

— Authorized privileges 

— Default privileges 
• Authorized privileges 

— Privileges enabled only by explicit use of the DCL command SET PROCESS/PRIVILEGE 

Default privileges 

— Privileges automatically enabled once the user has logged in 



Table 2-16: AUTHORIZE Qualifiers for Privilege Fields 



Qualifierf Function 



/DEFPRiviLEGEs= ( [NO] privname [,...]) Speclfies the list of pdvileges that are enabled 

at login time. The iteyword [NO]ALL disables or 
enables all user privileges. 

/pRiviLEGEs=( [NO ] privname [, . . .] ) Specifies the llst Of privileges granted (but not 

enabled) at login time. 

tAny privilege keyword used with either qualifier may be prefixed with "NO" to turn ofif the privilege. 
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Table 2-17: VMS Privileges 



Privilege 



Description 



ACNT May suppress accounting message 

ALLS POOL May allocate spooled device 

ALTPRI May set any priority value 

BUGCHK May make bug check log entries 

BYPASS Bypasses UIC checking 

CMEXEC May change mode to exec 

CMKRNL May change mode to kernel 

DETACH May create detached processes 

DIAGNOSE May diagnose devices 

EXQUOTA May exceed quota 

GROUP May affect other processes in same group 

GRPNAM May insert in group logical name table 

GRPPRV Group access via system protection 

LOG_IO May do logical I/O 

MOUNT May execute mount ACP function 

NETMBX May create network device 

OPER Operator privilege 

PFNMAP May map to specific physical pages 

PHYJO May do physical I/O 

PRMCEB May create permanent common event clusters 

PRMGBL May create pennanent global sections 

PRMMBX May create permanent mailbox 

PSWAPM May change process swap mode 

READALL May read anything as the owner 
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Table 2-17: VMS Privileges (Cont.) 



Privilege 



Description 



SECURITY May perform security functions 

SETPRV May set any privilege bit 

SHARE May assign channels to nonshared device 

SHMEM May create/delete objects in shared memory 

SYSGBL May create system-wide global sections 

SYSLCK May lock system-wide resources 

SYSNAM May insert in system logical name table 

SYSPRV May access objects via system protection 

TMPMBX May create temporary mailbox 

VOLPRO May override volume protection 

WORLD May affect other processes in the world 
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Removing a User Account 



Basic steps for most systems: 

— Remove the UAF record 

— Dispose of any remaining disk files 

— Remove the user's entries in voiume quota files (if any) 

— Remove associated mail information for the account 
Ail steps require that the SYSPRV privilege be enabled 
Removing the UAF record: 

— Use the AUTHORIZE REMOVE command 
Disposing of remaining disk files: 

— Save any necessary files using the BACKUP utility (or any other acceptable method, 
based on your site's data management policies) 

— Delete all files 

Removing quota file entries on volumes used by the user: 

— Use the SYSMAN utility to remove entries from each volume (requires OPER privilege) 

$ SET DEFAULT SyS$ SYSTEM 

$ RUN SYSMAN 

SYSMAN> DISKQOOTA REMOVE uic / DEVI CE=voliiine- name 

SYSMAN> EXIT 

$ 

Removing mail information: 

— Use the MAIL utility to remove the user's mail address 

$ MAIL 

MAIL> REMOVE username 

MAIL> EXIT 

$ 
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Example 2-6: Command Procedure to Delete a UFD and its Subdirectories 

$! DELTREE.COM (PI = name of device, P2 = name of directory) 

$! 

$! Command procedure to delete a UFD and all its subdirectories. 

$ ! Procedure deletes files from bottom of specified directory 

$ ! structure to top of structure . 

$! Requires SYSPRV privilege or a system UIC 

$! Back up all useful files before running this procedure. 

$! 

$ SET NOON 

$! 

$! Get name of directory structure to delete if not already known 

$! 

$ IF PI .EQS. "" THEN INQOIRE PI "Device, omit colon" 

$ IF P2 .EQS. "" THEN INQUIRE P2 "Directory (UFD, omit brackets)" 

$! 

$ ! Set protection to allow deletion of all files in structure 

$ SET PROTECTION=(S:RWED) 'P1':['P2 ]*.*;* 

$! 

$ I. Set up counter and loop label 

$! 

$ C0UNTER=8 

SLOOP : 

$! 

$ ! Delete files 

$! 

$ DELETE/LOG 'PI' :['P2... ]*.*;* 

$! 

$! If more files, delete them also 

S! 

$ C0UNTER=C0UNTER-1 

$ IF COUNTER .GT. THEN GOTO LOOP 

$! 

$! Delete UFD from MFD 

$! 

$ SET PROTECTION=(S:RWED) 'PI' : [000000] 'P2.DIR 

$ DELETE/LOG ' PI' : [000000] ' P2 .DIR; 1 

$ 
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steps for Removing a User 

To remove a user, log in as SYSTEM, or be sure your process the SYSPRV privilege enabled. 
If you employ disk quotas, then you will also need OPER privilege. The following comments 
are keyed to Example 2-7. 

1 Remove Mary Brown's UAF record. (NOTE: If Mary is just on a long vacation, you 
should instead disable her account by entering the MODIFY command with the qualifier 
/FLAGS=DISUSER, rather than remove it using these instructions.) 

2 Remove Mary Brown's UFD and subdirectory files on her default volume, using the 
command procedure DELTREE.COM shown in Example 2-6. (Before this step, you should 
examine her files and back up those you want to save, or transfer them to another user's 
directory.) 

3 Remove Mary Brown's record in her default volume's quota file. 

NOTE 

If Mary has quota records in quota files on other volumes, you should also remove 
those records. However, do not remove any quota records if Mary's UIC is not unique; 
if you remove the record, then other users of that UIC will not be able to use space on 
that volume. 

4 Remove Mary Brown's mail infonnation. 



Example 2-7: Removing a System User 

$ 

$ SET DEFAULT SyS$SYSTEM 

$ 

$ RUN AUTHORIZE 

UAF> REMOVE BROWN 

%UAF-I-REMMSG, record removed from SYSUAF.DAT 

%UAF-I-RDBREMMSGU, identifier BROWN value: [000011,000015] removed from RIGHTSLIST.DAT 

UAF> EXIT 

%UAF-I-DONEMSG, system authorization file modified 

%UAF-I-RDBDONEMSG, rights database modified 

$ 

$ QDELTREE DISKSOSER BROWN 

$ 

S RUN SYSMAN O^l^-te 

SYSMAN> DISKQUOTA RB M iglFE [11,15] /DEVICE=DISKSaSER 

SYSMAN> EXIT 

$ MAIL 

MAIL> REMOVE BROWN 

MAIL> EXIT 

$ 
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MANAGING USERS ON A DAILY BASIS 

Common daily management activities: 

— Managing user processes 

— Managing disk space 

— Communicating with users 
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Table 2-18: Methods of Regulating VMS Processes 



Method of 

Regulation Comments 



Access to CPU 



Priority VMS uses process priority to schedule process execution. 

Priority ranges from (lowest) to 31 (highest). 

Timesharing processes have priorities 0-15. VMS can automatically adjust 
the priorities of timesharing processes to promote greater CPU sharing. 

Real-time processes have priorities 16-31. VMS does not automatically adjust 
the priorities of real-time processes. 

Ability to affect VMS and system users 

Privileges In many cases, exercising a privilege results in the use of physical memory 

or other system resources. 

There is no restriction on the number of times a process can exercise a 
privilege. 

Ability to use certain system resources 

Limits Limits restrict the amount of a system resource a process can use at a given 

time. 

Limits are expressed numerically. 

Limits are also called quotas in some documentation. Do not confuse limits 
with disk quotas described below. 

Ability to store files on a disk volume 

Disk quotas Disk quotas restrict the number of blocks of storage a process can use on a 

volume. 

Disk quotas are established on volumes (which can be moved from device to 
device) rather than on devices. 

Disk quotas do not have to be established for every volume on a system; you 
can select which volumes have this restriction. 
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Table 2-18: Methods of Regulating VMS Processes (Cont.) 



Method of 

Regulation Co mments ___^ 

Access to devices, volumes, files, and interprocess communications 

Protection Every process has a UIC. 

Devices, volumes, files, and interprocess communication structures have an 
owner UIC and a protection code. 

One type of VMS protection compares the process UIC with the owner UIC 
and protection code of the protected stnjcture. 

Another type of VMS protection compares a user's access rights list with the 
access control list that belongs to the protected structure. 



Ability to modify or delete certain data structures, such as logical names 

Access mode Data structures created at more powerful access modes can be used at less 
powerful access modes; however, they cannot be modified or deleted at less 
powerful access modes. 



Ability to use or not use certain DCL commands 



CLI tables If a command is listed in the default DCL command table for the system, 

SYS$LIBRARY:DCLTABLES.EXE, all users on the system can use the 
command. However, you may create additional CLI tables and assign them 
to particular users to broaden or restrict their use of DCL commands. 
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Restricting User Activity Using DCL Commands 



A process can always control itself and its subprocesses 
Process control over subprocesses might be used for: 

— Handling several subprocesses simultaneously 

— Exception handling for subprocess problems 
Processes can be restricted by: 

— Changing their execution priority 

— Suspending their execution 

— Resuming their execution 

— Stopping execution and deleting the process 
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Table 2-19: Controlling Processes 



Suspending 
a process 



Resuming a 

suspended 

process 

Changing 
the base 
priority of a 
process 



Stopping 
and deleting 
a process 



Operation Command Format and Examples Comments 



$ SET PROCESS/SUSPEND - 
_$ [/ID=pid] [process-name] 
$ SET PR0CESS/SUSPEND/ID=21A 
$ SET PROCESS/SUSPEND JONES 



$ SET PROCESS /RE SOME - 

$ [/ID=pid] [process -name] 
$ SET PR0CESS/RES0ME/ID=21A 
§ SET PROCESS/RESUME JONES 

$ SET PROCESS/PRIORITY=n - 

_$ [/ID=pid] [process-name] 

$ SET PROCESS /PRIORITY-4 /ID=21A 



$ STOP (/ID=pid] [process-name] 
$ ST0P/ID=21A 



Every process has a unique pro- 
cess identification (PID), a hex- 
adecimal number. To refer to a 
process by PID, as shown in the 
example, use the /IDENTIFICA- 
TION qualifier. The command 
SHOW SYSTEM displays PIDs. 
You are not required to enter 
leading zeroes. 



Every process has a process 
name, unique within its UIC group. 
To refer to a process in your UIC 
group by process name, supply the 
name as the command parameter. 
To refer to a process not In your 
UIC group, you must use its PID, 
not its process name. 
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Restricting the Use of Disk Space 

UAF restricts use of many system resources 

No value in the UAF record restricts use of disl^ space 

Disl< space restriction Is fiandled throughi disk quotas 

— Quotas are based on UlCs, not individual user names 
Disk quotas are managed tfirough use of the SYSMAN utility 

— DISKQUOTA command subset 

Disk quotas are enabled on a volume-by-volume basis 

— Default is no disk quotas enabled 
Quota files 

— One file per enabled volume: [000000]QUOTA.SYS 

— Contains quota entries, one per UIC 

— Created and manipulated by SYSMAN 

SYSMAN Utility and DISKQUOTA Functions 

SYSMAN serves many system management functions 

— Used primarily for VAXcluster systems 

• SYSMAN DISKQUOTA command subset 

— Used to create, enable, disable, and delete quota files 

— Used to add, modify, and remove quota entries 
To run SYSMAN (must have OPER privilege enabled): 

$ RUN SYS$SYSTEM:SYSMftN 
SySMAH> 

• To get help on SYSMAN DISKQUOTA commands: 

SYSMAH> HELP DISKQUOTA 
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Table 2-20: DISKQUOTA Commands Within the SYSMAN Utiiity 



Command Formatt 



Description 



DISKQUOTA ADD uic 
DISKQUOTA CREATE 

DISKQUOTA DISABLE 
DISKQUOTA ENABLE 
DISKQUOTA MODIFY uic 

DISKQUOTA REBUILD 

DISKQUOTA REMOVE uic 

DISKQUOTA SHOW 

EXIT 

HELP DISKQUOTA 



Adds an entry to a disi< quota file and initializes its usage count 
to zero. 

Creates and enables a quota file for a disk volume that does 
not currently contain one. It is strongly recommended that you 
do NOT create and enforce quotas on the system disk. 

Suspends the maintenance and enforcement of disk quotas on 
a volume. 

Resumes quota enforcement on a disk volume containing an 
existing quota file. 

Changes an entry in a quota file, or adjusts default values for 
quotas and overdrafts. Default values for entries on the volume 
are taken from the entry [0,0]. 

Updates a quota file, adding new UiCs and correcting usage 
counts for each user on the volume. 

Deletes an entry from the quota file. 

Displays quotas, overdrafts, and usage counts. 

Exits user from the SYSMAN utility. 

Obtains help infomiation on the DISKQUOTA commands. 



tFor all of these commands, be sure to use the qualifier /DEYICEsvolume-name to specify the proper volume; 
otherwise SYSMAN will use either the last volume specified with the most recent /DEYICE=volume-name, or 
the volume associated with your current default directory (if you had not yet used /DEYICE=voluine-naine in a 
DISKQUOTA command.) 
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Establishing Quotas on a Volume 

• A quota file must be created in the volume's I^FD (directory [000000]) 
Exact steps for properly creating tfie quota file depend on whether: 

— The volume has just been created (no user files exist yet) 

— The volume has been in use for a while (user files already exist) 

• One entry must be created for each UIC allowed to use the volume 
Each quota entry contains the following fields: 

— UIC 

— Usage 

— Permanent Quota 

— Overdraft 

Quotas should not be enabled on the system disk 
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Table 2-21 : Fields in a Quota File Record 



Field 



Meaning 



DISKQUOTA Qualifier 



UiC 



Usage 

Permanent 
Quota 

Overdraft 



Identifies the user who is permitted to use the 
volume. Note that files are owned by UlCs, 
not by user names. Therefore, if more than 
one user shares the same UIC, all of them 
have the same access to files. They also 
share the quota assigned to that UIC for the 
volume. When you log in, VMS reads your 
UAF record to determine your UIC. 

Shows the number of blocks of storage this 
UIC owns. 



Determines the number of blocks of storage 
this UIC can own before VMS refuses to 
create new files or extend existing files. If the 
UIC has an Overdraft value greater than 0, a 
user with this UIC can retry the file operation 
(create or extend). 

Determines the number of blocks above the 
permanent quota this UiC can own before 
VMS refuses to create new files or extend 
existing files. Therefore, the permanent quota 
plus the overdraft defines the total number of 
blocks available to a user on a volume. 



Specify the UiC as a parame- 
ter, not as a qualifier, in 
DISKQUOTA commands. 



None. This value is updated 
by VMS as files are created by 
the UIC. It is not assigned by 
the system manager. 

/PERMQUOTA 



/OVERDRAFT 



Table 2-22: Establishing Quotas on a New Volume Called DiSK$DATA 



Steps Commands 



Comments 



1 Log in as SYSTEM 



2 $ RUN SYS$SYSTEM:SYSMAN 

3 SYSMAN> DISKQUOTA CREATE - 

SYSMAN> /DEVICE=DISK$DATA 



You can alternatively give your current process 
the OPER privilege to use the SYSMAN utility. 

Invoke the SYSMAN utility. 

Creates the file DISK$DATA:[000000]QUOTA.SYS 
and automatically enables quotas on the volume. 
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Figure 2-3: Adding a Quota Record to a Voiume Quota File 



$ RUN SYS$SYSTEM:SYSMAN 
SYSMAN> DISKQUOTA ADD [11,21- 
_SYSMAN> /DEVICE=DISK$DATA 
SYSMAN> EXIT 
$ 




SYSTEM MANAGER 



VOLUME QUOTA FILE 

[OOOOOOJQUOTA.SYS 

FOR VOLUME 

DISK$DATA 




$ SET DEFAULT DISK$DATA 
$ CREATE [SMITHJFILE.DAT 




RECORD: UIC [11,2] 



USER WITH UIC [11,2] 



TTB X0*74_88A 
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Table 2-23: Displaying the Contents of a Volume Quota File 

Operation SYSMAN Command Format 



Displaying the entry of a particular user diskquota show [uic] 

Displaying the entries of all users with UlCs in a diskquota show [group-number, *] 
particular group 

Displaying the entries for all users diskquota show [*, *] 

Displaying DISKQUOTA commands help diskquota 



NOTE 



The disk volume usage recorded by VMS and displayed by SYSMAN includes some 
overhead. Therefore, the disk usage displayed by the SYSMAN command DISKQUOTA 
SHOW and the DCL command SHOW QUOTA is usually different than the disk usage 
displayed by the DCL command DIRECTORY/SIZE=ALLOCATED. 
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Example 2-8: List of Volume Quota File Records 

$ RUN SYS $ SYSTEM :SYSMAN 

SYSMAN> DISKQOOTA SHOW [*,*] /DEVICE=DISK$aSER 



Die Osage 

[0,0] 

[SYSTEM] 12047 

[VMS, BEYER] 11685 

[11,15] 56 

[VMS, CLARK] 16233 

[VMS,DORSEY] 13510 

[VMS,HARKINS] 18221 

[VMS, HUNT] 21060 

[11,340] 22905 

[VMS,DISALVO] 9021 

[VMS,TARGONSKI] 2425 

[12,1] 4 

[BEYER2] 142 

[GROUP21, ALBERT] 14137 

[21,10] 10 

[21,20] 2 

[GR0UP21,EBERT] 5962 

[ GROUP 2 1 , GALVIN ] 3295 

[GROUP21, TATAR] 32 

[31,5] 2 

[GR0UP31,HARB0] 6117 

[ GRODP3 1 , CONNOR] 32 61 

[PAPISON] 666 

[CHERPAS] 19 

[ GROUP 101,ALCOCK] 29806 

[GROUP 101, LUCAS] 27257 

[ GROUP 101,MASORS] 125 

[GROUP 101, WILSON] 20968 

[123,321] 20 

[DATAjCOMM, DELIA] 12 93 1 

[DATA_COMM,LENTZ] 6341 

[200,3] 2 

[200,200] 60 

[DECNET] 78 

[J65,D0E] 4 

SYSMRN> EXIT 
S 



Permanent Quota 


Overdraft 


690 


200 


13000 


200 


15000 


200 


56 


200 


20000 


200 


20000 


200 


20000 


200 


30000 


200 


30000 


200 


18000 


200 


4000 


200 


690 


200 


144 


200 


20000 


200 


690 


200 


690 


200 


12000 


200 


5000 


200 


2000 


200 


2 


200 


10000 


200 


8000 


200 


690 


200 


690 


200 


30000 


200 


30000 


200 


690 


200 


25000 


200 


690 


200 


20000 


200 


20000 


200 


690 


200 


690 


200 


690 


200 


100 


100 
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Table 2-24: Managing Individual Records in tiie Volume Quota File 



Operationt 



SYSMAN Command Format 



Adds a new entry, specifying values 
different from the default entry ([0,0]) 

Modifies an existing entry 

Modifies the entry for [0,0], used to 
supply default values for Permquota 
and Overdraft ([0,0] should never own 
any flies.) 

Modifies ail entries for UlCs in a 
particular group 

Modifies ail entries, including the default 
entry, [0,0] 

Removes an existing entry 



DISKQUOTAADD uic - 

_SYSMaN> [/PEBMQUOTA=blksl] [/0VERDRAFT=blks2] 

DISKQUOTA MODIFY uic - 

_SYSMAN> [PERMQOOTA=blksl] [/0VERDRAFT=blks2] 

DISKQUOTA MODIFY [0,0] - 

_SYSMAN> [/PERMQUOTA=blksl] [/0VERDRAFT=blks2] 



DISKQOOTA MODIFY [group-number,*] - 

_SYSMAN> [/PERMQOOTA-blksl] [/OVERDRAFT=blks2] 

DISKQOOTA MODIFY [*,*] - 

_SYSMAN> [/PERMQUOTA=blkal] [/0VERDRAFT=blks2] 

DISKQOOTA REMOVE uic 



tThe SYSMAN utility perfonns all operations on the cunent QUOTA.SYS file. The cunent file is the one on 
your current default device if you did not specify one with the /DEVICE qualifier. Be sure to specify the proper 
volume for your command; otherwise, the most recently used /DEVICE qualifier sets the current file specification. 
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Table 2-25: Establishing Quotas on an Existing Volume Called DISK$USER 



Steps Commands 



Comments 



1 Notifies users that OISK$USER will 

be unavailable 

2 $ RUN SYS $ SYSTEM : SYSMAN 



SYSMAN> DISKQDOTA - 
SYSMMI> CREATE /DEVICE=DISK$USER 



SYSMRN> DISKQDOTA MODIFY [0, 0] 
_SYSMRN> /PERMQOOTA=10000 - 
SYSMAN> /OVERDRAFT=1000 



sySMftN> DISKQUOTA REBUILD 



6 

7 



SYSMAN> EXIT 

Notifies users that DiSK$USER is 
available for use. 



There are a number of ways to notify users of 
the volume. See the section Communicating 
with User Processes in this module. 

Invoke the SYSMAN utility. Make sure your 
current process has the SYSPRV privilege to 
use the SYSMAN utility. 

Creates a quota file on the DISK$USER 
volume (DISK$USER:[000000]QUOTA.SYS) 
and automatically enables quotas on that 
volume. 

Sets the default entry values for the quota file 
on DISK$USER. Use appropriate values for 
/PERMQUOTA and /OVERDRAFT to reflect 
your management policy on the volume. 
Note that the /DEVICE=DISK$USER qualifier 
need not be specified, as the qualifier was 
properiy specifed in Step 3. 

Updates the newly created quota file to 
add existing UlCs that own files on the 
DISK$USER volume. Note again that 
/DEVICE=DISK$USER qualifier need not be 
specified in this case. 

Exit from the SYSMAN utility. 

See the section Communicating with User 
Processes for possible techniques of user 
notification. 
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Disabling and Enabling Quotas on a Volume 

To disable quotas, use tiie SYSMAN command DISKQUOTA DISABLE 

Use the SYSMAN command DISKQUOTA REBUILD to properly assess user space on a 
volume If: 

— Tlie volume previously had a quota file created 

— Quotas were once enabled on the volume 

— Quotas were later disabled 

An automatic DISKQUOTA REBUILD performed when a volume is mounted after being 
Improperly dismounted 

— Typical situation after a system failure (crash) 
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Managing Disk Space Using DCL Commands 



Table 2-26: Controlling Files with DCL Commands 



Operation 



Command Format 
and Examples 



Comments 



Changing the owner- 
ship of a file 

Remember that VIVIS 
records the use of 
disl< space on a UiC 
basis, so changing 
the owner UIC of a 
file changes which 
disl< quota entry the 
space is recorded 
under. 

Establishing auto- 
matic version dele- 
tion for a particular 
file 



Adding an ACL to a 
file or modifying on 
existing ACL on a file 

Deleting unwanted 
versions of files 



$ SET FILE/OWNER_OIC=uic - 
_$ file- spec 



$ SET FILE/0WNER_0IC=[320, 63] 
$ INVENTORY.DAT 



$ SET FILE/VERSION_LIMIT=n 
_$ file-spec 

$ SET FILE/VERSI0N_LIMIT=2 
$ [MARTIN...]*.* 



$ SET ACL/OBJECT_TYPE=FILE 
_$ file -spec 

$ SET ACL/OBJECT_TYPE=FILE 
_$ [ADMIN] PAYROLL. DAT 

$ PORGE filespec /KEEP=n 
$ PORGE TEMP. DAT /KEEP=1 



This operation requires 
SYSPRV privilege or a system 
UIC. One reason for using 
this would be if you forget 
the /OWNER qualifier when 
copying a file to a user's 
directory. 



VMS automatically deletes the 
file with the lowest version 
number when you create a 
new version to keep the total 
number of versions equal to 
the version limit for the file. 

The keyword FILE specifies 
the file whose ACL is being 
edited. 

The /KEEP qualifier is used 
to specify how many versions 
to retain. If no parameter is 
specified, the qualifier defaults 
tol. 
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Table 2-27: Controlling Directories and Volumes with DCL Commands 



Operation 



Command Format 
and Examples 



Comments 



Changing the owner- 
ship of a directory 

Changing the UIC 
changes which quota 
file entry the space is 
recorded under. 

Establishing auto- 
matic version dele- 
tion for all files in a 
directory 



Adding an ACL to 
a directory file or 
modifying an existing 
ACL on a directory 
file 

Disabling special pro- 
tection on a directory 
file 

Changing the owner- 
ship of a volume 

Volumes have pro- 
tection masks that 
are similar to file 
protection masks. 
A user who does 
not pass the vol- 
ume protection mask 
cannot access any 
directories or files on 
the volume. If you 
change the owner 
UIC of a volume, you 
affect who will be 
able to access space 
on that volume. 



$ SET DIRECTORY/OWNER_UIC=uic - 
_$ directory-spec 
$ SET DIRECTORY/OWNER_OIC=[ENG] 
$ DISK$DESIGNS: [PRODUCT X] 



$ SET DIRECTORY/VERSION_LIMIT=n 
_$ directory- spec 
$ SET DIRECT0RY/VERSI0N_LIMIT=3 
$ DISK$MFG: [INVENTORY] 



S SET DIRECTORY/ACL - 

_$ directory-spec 

$ SET DIRECTORY/ACL WORKl : [SMITH] 



$ SET FILE/NODIRECTORY file-spec 
$ SET FILE/NODIRECTORY - 
_$ [USERS] SMI TH.DIR 

$ SET VOLUME/OWNER_UIC=uic - 
_$ device- spec 

$ SET VOLUME/OWNER_UIC= [ADMIN] - 
S DISKS DATA 



This operation requires 
SYSPRV privilege or a system 
UIC. One reason for using 
this would be if you forget 
the /OWNER qualifier when 
creating the directory for a 
user. 

This sets a version limit on all 
files subsequently created in 
the directory. It does not affect 
previously created files. You 
can also use the SET FILE 
command to set a different 
limit for a particular file. 

invokes the ACL editor, dis- 
cussed later in this course in 
MODULE 8. 



This command enables you 
to delete a corrupted directory 
file, it is not intended for use 
on normal (valid) directory files. 

This operation requires the 
VOLPRO privilege. 
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COMMUNICATING WITH USER PROCESSES 

System managers must be fluent in user communication methods 
Communication methods on VMS: 

— Common directory for collecting and distributing information 

— VMS utilities and commands 



Table 2-28: Communication Methods 



Communication 



Method 



Operator/user direct dialogue 

System-wide distribution of messages and Information 

User requests to the operator 

Operator responses to user requests, or short messages to 
users 



PHONE utility 

MAIL utility 

REQUEST command 
MOUNT command 

REPLY command 
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Handling Requests for Operator Assistance 

The operator communication process: OPCOM 

— Coordinates all requests by users for operator assistance 

— Coordinates all operator responses to users 
Requests for operator assistance come from: 

— MOUNT or REQUEST/REPLY commands 

— I/O events 

Requests are sent to operator terminals: 

— Based on the category of the request 

— Operator terminals must be enabled for requests 

• Use the REPLY/ENABLE command to enable operator terminals 

$ REPLY/ENABLE= (PRINTER, TAPES) TXG6 

• Use the REPLY/DISABLE command to disable operator terminals 

$ REPLY/DISABLE=PRINTER TXG6 

Use the REPLY/STATUS command to determine request categories enabled on your 
terminal 
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Table 2-29: Operator Categories Enabled/Disabled with the REPLY Command 



Category 
Keyword 



CARDS 

CENTRAL 

CLUSTER 

DEVICES 

DISKS 

NETWORK 



OPERl 

through 

0PER12 

PRINTER 

SECURITY 

TAPES 



Description 



Displays messages sent to the card readers. 

Displays messages sent to the central system operator. 

Displays messages from the connection manager pertaining to cluster state 
changes. 

Displays messages pertaining to mounting disks. 

Displays messages pertaining to mounting and dismounting disk volumes. 

Displays messages pertaining to networks; the keyword CENTRAL must also be 
specified to inhibit network messages when disabling network messages with 
qualifier /DISABLE=NETWORK. 

Displays messages sent to operators identified as 0PER1 through 0PER12. 

Displays messages pertaining to print requests. 

Allows messages pertaining to security events. Requires SECURITY privilege. 

Allows messages pertaining to mounting and dismounting tape volumes. 
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Table 2-30: Events Requiring Operator Assistance 



Event Causing 
Request 



Category of Oper- 
ator Notified 



Operator Action 



Comments 



i\40UNT 
commands 



DISKS or TAPES 



REQUEST/REPLY 
commands 



I/O event: any 
command that 
reads a file 
on a tape 



All operators or 
only ttie group(s} 
of operators you 
specify. Group 
names include 
DISKS, TAPES and 
0PER1. 

TAPES 



Mount a disk or tape 
volume. 



Perform the operation 
(or not), then respond 
to the user. 



Mount a new tape 
reel for the file system 
when it is reading a 
multireel volume set. 
Mount a new tape 
reel for the file system 
when it is writing a 
multireel volume set. 



By default, all MOUNT 
commands request 
operator assistance 
unless the appropriate 
volume is already 
loaded on the drive. 

The user is waiting 
for a reply from the 
operator, and can do 
no other worl< until a 
reply is received. 



The operator receives 
a message from the 
MOUNT utility to mount 
another volume. The 
message looks sim- 
ilar to the message 
received from the 
MOUNT command 
when a user is at- 
tempting to mount a 
tape that is not loaded. 
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Example 2-9: Using REQUEST/REPLY 

$ 

$ REQUEST/REPLY "Please respond to this message" 

%OPCOM-S-OPRNOTIF, operator has been notified, waiting,.. 20:18:40.03 

%0PCOM-S-OPREPLY, 

Hold on just a minute, please. 

20:20:46.88, request 13578 is pending by operator _S0PER$TTD6: 

%OPCOM-S-OPRNOTIF, operator has been notified, waiting... 20:20:46.99 

♦CANCEL* 

%OPCOM-I-RQST_PROMPT, REQUEST - Enter message or cancel request with control/Z. 

REQUEST - Message? *EXIT* 

%OPCOM-S-OPREPLY, 

%%%%%%%%%%% OPCOM 24-JUL-1984 20:21:03.89 %%%%%%%%%%% 

Request 13578 was canceled 

$ 

$ 



Example 2-10: Operator Aborts a Request 

$ REQUEST /REPLY "Please mount the tape labeled MYBACKDP" 

%OPCOM-S-OPENOTIF, operator has been notified, waiting... 20:25:58.64 

%OPCOM-S-OPREPLY, 

There is no such tape 

20:26:20.81, request 14602 was aborted by operator SDPER$TTD6: 

$ 

$ 
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Example 2-11 : Operator Receives Message from REQUEST/REPLY Command 

%%%%%%%%%%% OPCOM 24-J0L-1984 19:00:15.00 %%%%%%%%%%% 

Request 5377, from user JONES 

_TTAO:, Please connect remote sensor 3A 

$ 



Example 2-12: Operator Receives l\/lessage from MOUNT Program 

%%%%%%%%%%% OPCOM 24-JOL-19e4 19:00:57.60 %%%%%%%%%%% 

Request 6401, from user SMITH 

Please mount volume DATA15 in device_MUAO; 

$ 



Example 2-13: Operator Receives Message from REQUEST Command, No Reply 
Required 

%%%%%%%%%%% OPCOM 24-JOL-1984 17:01:15.00 %%%%%%%%%% 

Message from user GREEN 

_TTB2: . Please check the line printer 

$ 



Example 2-14: Operator Receives Two Messages from AUTHORIZE Utility 

%%%%%%%%%%% OPCOM 24-JUL-1984 19:02:16.92 %%%%%%%%%%% 

Message from user SYSTEM 

PID=2020008D SYSTEM added SYSUT^ record BROWN on 24-JUL-1984 19:02:16.91 

%%%%%%%%%%% OPCOM 24-JOL-1984 19:02:35.48 %%%%%%%%%%%% 

Message from user SYSTEM 

PID=2020008D SYSTEM modified SYSOAF record SMITH on 24-JUL-1984 19:02:35.47 
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Table 2-31 : Providing Operator Assistance 



Circumstance 



Command Format 



Comments 



User-requested function 



User enters MOUNTcommand 
without loading a disk or tape 
volume in drive 



User enters MOUNT command 
without the volume first being 
loaded. You attempt to load the 
volume on the drive, but fail. 
You decide to load the volume 
on an alternate drive (MUA2). 

User needs to read information 
that spans more than one 
volume. You must load the 
next volume when the system 
requests it. 

User needs to write more 
infomiation than one volume 
can contain. You must load 
another volume when the 
system requests it. 



Cannot perform user-requested 
function; must abort request 



May be able to perform re- 
quested function; want to notify 
interactive user, but leave 
request pending 



$ REPLY/TO=request-id - 
$ "message- text" 



No command required. Just load the volume 
requested on the drive. 



$ REPLY/TO=request-id - 

_$ "Reissue mount using M0A2" 



$ REPLY/TO=request-id 
$ "volume-label" 



5 REPLY - 

_$ /INITIALIZE_TAPE=request-id • 

_$ "tape-label" 



$ REPLY - 

_$ /BLANK_TAPE=request-id 

_$ "tape-label" 

$ REPLY/ABORT=request-id - 
_$ "message-text" 



$ REPLY/PENDING=request-id 
_$ "message-text" 



Users request various functions. 
Use the REPLY command with an 
appropriate message to respond. 

The MOUNT utility sends a mes- 
sage to the operator terminal(s). 
The message includes the name of 
the volume requested. 

Tell the user where you are loading 
the volume. The user must enter 
the MOUNT command again. 



Respond to the system message 
after you have loaded the volume. 
Specify the volume's label in the 
message. 

Use the /INniALaE_TAPE 
qualifier if the tape has been 
initialized before. VMS checks the 
tape's protection code. If you are 
not allowed access according to 
the code, you need the VOLPRO 
privilege to gain access. 

Use the /BLANK_TAPE qualifier 
for new tapes. You need VOLPRO 
privilege because it bypasses 
volume protection checking. 

Typically used when you cannot 
locate or use a resource requested 
by the user, (such as a volume, a 
drive, paper, or ribbon). You abort 
the request to cancel the repeated 
messages sent to the operator 
terminal. Then find the resource or 
use the REPLY command or the 
MAIL utility to explain the situation 
more completely. 

Since the request is pending, the 
user does not regain control of 
his or her own terminal. Tlie user 
regains control (remms to the DCL 
prompt) by cancelling the request 
or by waiting until the operator 
completes it. 
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Example 2-15: Request-Reply interaction Between User JONES and User TAPES 

Tapes: $ REPLY/ENABLE= (TAPES, OPERl) 

%%%%%%%%%%% OPCOM 24-JUL-1984 19:28:18.57 %%%%%%%%%%% 
Operator S0PER$TTA1 : has been enabled, username TAPEOPR 

$ 

%%%%%%%%%%% OPCOM 24-JUL-1984 19:28:18.73 %%%%%%%%%%% 

Operator status for operator _SUPER$TTA1 : 

TAPES, OPERl 



Jones: 



Tapes: 



$ REQUEST/TO=TAPES/REPLY "Please mount tape 362F" 

%OPCOM-S-OPRNOTIF, operator has been notified, waiting... 19:31:18.65 

$ 

%%%%%%%%%%% OPCOM 24-JUL-1984 19:31:18.67 %%%%%%%%%%% 
Request 9482, from user JONES on SUPER 
SUPER$TTA2:, Please mount tape 362F 



%%%%%%%%%%% OPCOM 24-0rUL-1984 19:31:18.67 %%%%%%%%%%% 
Request 9482, from user JONES on SUPER 
_SUPER$TTA2 : , Please mount tape 362F 

$ REPLY/PENDING=9482 "You are second in line" 

Jones: %OPCOM-S-OPREPLY, 

You are second in line 

19:31:48.82, request 9482 is pending by operator_SUPER$TTAl : 

%OPCOM-S-OPRNOTIF, operator has been notified, waiting... 19:31:49.05 

Tapes: $ REPLY/ T0= 94 82 "Tape 362F is now mounted" 
Tape 362F is now mounted 
19:39:18.48, request 9482 was completed by operator _SUPER$TTA1 ; 



Jones: 



Tapes: 



%0PC0M-S-0PREPLY, 

Tape 362F is now mounted 

19:39:18.48, rquest 9482 was completed by operator 

$ REQUEST/TO=TAPES "Thank you" 



SUPER$TTA1 : 



%%%%%%%%%%% OPCOM 24-JUL-1984 19:39:43.16 %%%%%%%%%%% 
Message from user JONES on SUPER 
_SUPER$TTA2 : . Thank you 

$ REPLY/DISABLE= (TAPES) 

%%%%%%%%%%% OPCOM 24-JUL-1984 19:40:02.16 %%%%%%%%%%% 

Operator status for operator _SUPER$TTA1 : 

OPERl 
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Table 2-32: Sending Messages to Users 



Operationf 



Command Format and Examples 



Sending a message to all 
terminals on the system 

Sending a message to 
all terminals where users 
are logged on 

Sending a message to 
specified users 

Sending a message to 
a specified terminal or 
terminals 

Sending a message 
about system shutdown4: 

Sending an urgent mes- 
saget 



$ REPLY/ALL "message-text" 

$ REPLY/ALL/BELL "DISK$OSER will be unavailable at noon." 

$ REPLY/OSERNAME "message- text" 

$ REPLY/OSERNAME "Policy Meeting in 10 minutes" 

$ REPLY/USERNAME= (name [,...]) "message- text" 

$ REPLY/OSERNAME=(JKMARTIN, BECKER) "DISK$DATA is available" 

$ REPLY/TERMINAL= (term [,...]) "message-text" 

$ REPLY/TERMINAL=(TXQ2,TXQ3) "Terminal repairperson due at 

3pm ! " 

$ REPLY/SHUTDOWN "message-text" 

$ REPLY/SHDTDOWN "System will be down for PM at 2 . " 

$ REPLY/URGENT "message-text" 

$ REPLY/URGENT "Everyone off the system NOW! ! " 



t lb ring or buzz the terminal receiving the message, use the additional /BELL qualifier. More bells ring for 
URGENT and SHUTDOAVN messages than for other types of messages. 

t URGENT and SHUTDOWN messages are NOT sent to user terminals that have the command SET 
TERMINAL/NOBROADCAST. 
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REPLY Command 



Table 2-33: Qualifiers to the REPLY Command 



Function 



Qualifier 



Responding to Requests 



Lists the requests that have not been sent a final message 

Sends a final response to a request 

Sends a response to a request, but not the final response 

Cancels the request 

Sends the label of an initialized tape as the final response 

Sends the label of a blank tape as the final response 



/STATUS 

/TO»>requ«st-id 

/PENDING-request-id 

/ABORT=roquest-id 

/lNITIALIZE_TAPE=request-id 

/BLAHK_TAPE=reque3t-id 



Sending Messages and Information 
Sends a message to a specific terminal 

Sends a message to all users presently logged in to the 
system, or to specific users 

Sends a message to all terminals whether a user is 
logged in or not 

Sends an urgent message to all users 

Sends a shutdown message to all users 

Causes the terminal receiving the message to buzz or 
ring (add this to any of the above qualifiers) 

Requests that the originating terminal be notified when 
the message is successfully received 



/TERMINAL= (term [,...]) 

/USERNAME 

/OSERNAME= (name [,...]) 

/ALL 



/URGENT 

/SHUTDOWN 

/BELL 

/NOTIFY 



Controlling Operator Terminals and the Log File 



Sets up a nonconsole terminal as an operator's terminal /enable 

Stops a terminal from being an operator's terminal /disable 

Closes the current OPERATOR.LOG file and opens a /log 
new file with a higher version number 

Designates this terminal to be an operator's terminal only /temporary 
for the current interactive session. 

Lists the categories enabled for this terminal /status 
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Operator's Log File 

• SYS$MANAGER:OPERATOR.LOG 
Entries made by OPCOM process 
Logs operator requests and replies 
Controlled by the system manager 



Table 2-34: Controlling the Operator's Log 



Operation 



Command Format 



Comments 



Closing the operator's log 
and opening a new one 

Closing the operator's log 
but not opening a new one 

Printing the operator's log 
file 



$ REPLY/LOG 



$ REPLY/NOLOG 



$ SET DEFAULT SYS$MANAGER 
$ PRINT OPERATOR. LOG; n 



Requires OPER privilege. 

Requires OPER privilege. 

In this command format, 
";n' indicates the version 
number. You can print (or 
type) any version except the 
current one, which is locked 
by OPCOM. 
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SUMMARY 

• The system manager is responsible for the management of key system databases and 
command procedures 

— User authorization fiie (SYS$SYSTEM:SYSUAF.DAT) 

— Quota files on disk volumes ([000000]QUOTA.SYS) 

— Login files (for example, SYS$MANAGER:SYLOGIN.COM) 

Many process characteristics are defined by values In the corresponding UAF record 
Add a user account to the system by creating 

— UAF record, specifying: 

Identification and environment information 
Access and security constraints 
Quotas and resource limits 
Privileges 

— Default disk device and directory 

— One or more disk quota entries 
To remove a user from the system 

— Remove the UAF record 

— Remove remaining disk files 

— Remove quota entries (if unique to user's UIC) 

Establish and maintain disk quotas on volumes using SYSMAN utility 

— DISKQUOTA subcommands 

• Use DCL commands to regulate resources and processes running on the system 

SET PROCESS Set process characteristics 

STOP Stop a process 

PURGE Delete old versions of files 

SET FILE Set file characteristics 

SET DIRECTORY Set directory characteristics 

SET VOLUME Set volume characteristics 
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Respond to user requests and send messages using 

— REPLY command 

— MAIL utility 

— PHONE utility 

Define operator terminals using REPLY/ENABLE=(class,...) 

— Set reception of certain operator-related messages by specifying appropriate class 
keywords witli the /ENABLE qualifier 

Manage the operator log file using 

— REPLY/[NO]LOG 

— PURGE 
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MODULE 3 
MANAGING QUEUES 
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INTRODUCTION 

When you issue the PRINT command to print a file, ail the system printers may already be 
in use. Because this condition occurs often, VMS maintains a list of all print requests in the 
order in which they occur. This ordered list is called a print queue, and the requests are called 
print jobs. The PRINT command places your job in the queue. When the system is ready 
to process your job, it passes it to the printer associated with the queue or the first available 
printer, which prints the file. Simiiariy, when you issue the SUBMIT command to execute a 
command procedure in a batch process, system resources may not be sufficient to support the 
immediate creation of a batcli process for you. Therefore, VMS maintains a list of all batch 
requests in the order in which they occur. This ordered list is called a batcli queue, and the 
requests are called batch Jobs. When the system is ready to process your batch job, it creates 
a batch process and executes your command procedure in the context of that batch process. 

System managers customize batch and print queues on their systems. They attempt to 
maximize the performance of the system by matching the system queue structure to the 
woridoad and resources of their system. Usually, the system manager includes queue 
customization commands in startup procedures, so queues are created automatically when 
he or she starts the system. The module Customizing the System contains a more detailed 
discussion on startup procedures. 

As the queues are used, various problems may require the system manager's intervention. For 
example, paper can get jammed in a line printer, printers can njn out of paper, or a batch job 
may need to be aborted. In these and other cases, the system manager must enter queue 
management commands to control the jobs in a queue while fixing the problem. 
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OBJECTIVES 

To share limited printing and CPU resources among users and processes, a system manager 
must be able to: 

Describe how the VMS operating system handles print and batch jobs 

Assess user requirements for batch and print facilities 

Perform the following queue management tasks: 

— Select proper queue attributes and characteristics to match user requirements 

— Create print and batch queues 

— Restrict access to queues 

— Modify the attributes and characteristics of queues 

— Control queues 

— Handle queue problems 



RESOURCES 

1 . VMS System Manager's Manual 

2. Guide to Using VMS Command Procedures 

3. VMS DCL Dictionary 

4. Guide to VMS System Security 

5. VMS Access Control List Editor Manual 

6. Guide to Maintaining a VMS System 
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OVERVIEW OF QUEUE FACILITIES AND OPERATIONS 

The queue manager process (JOB_CONTROL) 
. The system queue file {SYS$SYSTEM:JBCSYSQUE.DAT) 
Types of queues 

Queue Manager and the System Queue File 

. Queue information stored in SYS$SYSTEM:J BCSYSQUE.DAT 
. START/QUEUE/MANAGER 

— Creates SYS$SYSTEM:JBCSYSQUE.DAT (if it does not already exist) 

— Starts the queue manager function of the JOB_CONTROL process 

— Should be included in the startup command procedure (SYSTARTUP_V5.COM) 

— Should use the qualifier /RESTART if the command must be used interactively to 
restart the queue manager 

Figure 3-1 : JOB_CONTROL Process Handles All Print Jobs 
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Types of Queues 

Two classes of queues: 
— Execution 



Accepts either batchi or print jobs for processing, depending on liow the queue 
was initialized (created) 

— Generic 

IHolds jobs untii they are transferred to an assigned execution queue 
Queue classes are further categorized into types of queues, depending on: 

— The l<ind of job the queue accepts 

— The type of device to which output is directed 

• Three types of queues: execution, generic and logical 

Table 3-1 : Types of Queues 



Queue Type Action 



Execution Executes the job. 

Generic Moves jobs to specified execution queues when resources for executing the 

job are available. 

Logical Moves jobs to execution queues when the manager sets up an association 

between a logical queue and an execution queue. The association does 
not have to be permanent and it does not always have to be made with the 
same execution queue. 



3- 6 Managing Queues 



Execution Queues 

• Performs the actual processing of the job 
Two types of execution queues: 

— Batch 

Can only accept (process) batch jobs 
Executes as a ctetecAjecf process 

— Output 

Accepts (typically) print jobs for processing by an independent process called a 

symbiont 

Three types of output execution queues: 

Printer Directs output to line printers 

Terminal Directs output to terminal printers (printers attached to 

terminal lines) 
Server Processes files in the queue using a specially created 

symbiont 

Symbionts for server execution queues are user-written 

Not necessarily used for print output operations 
Not covered in this course 
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Generic Queues 

Used to hold a job until an associated execution queue becomes available 

The list of associated execution queues is defined when the generic queue is initialized 

When an execution queue becomes available, the job is requeued from the generic queue 
to the execution queue 

Two types of generic queues: 

Generic batch queue Directs jobs only to batch execution queues. These 

are typically used in VAXclusters to distribute the 
wori<load across several systems. 

Generic output queue Directs jobs to any of the three types of output 

execution queues: printer, terminal, or server. 

Logical Queues 

• Specially defined output execution queue 

• Not really an output execution queue 

— Has its output redirected to another execution queue 

— Holds a job until it can be transferred to the execution queue 
Appears as a sort of "holding" queue 

Logical queues and generic queues are somewhat similar: 

— A logical queue is usually associated with a single output execution queue ("one-to-one" 
relationship) 

— I\4ultiple logical queues can be associated with a single execution queue {"many-to-one" 
relationship) 

— A generic queue can be associated with one or more execution queues ("one-to-one" 
or "one-to-many" relationship) 

• Both the logical and associated execution queues must be started for jobs to be processed 
Can only be used with output execution queues, not with batch queues 
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HOW VMS HANDLES PRINT JOBS 

Print queues solve waiting and scheduling problems 
PRINT command places a job in the queue 
Print symbionts execute print jobs 
• JOB_CONTROL sends jobs to print symbionts 



Example 3-1 : JOB_CONTROL and Print Symbicnt Processes 



$ SHOW SYSTEM 
VAX/VMS V5.0 



Pid 
20200021 



Process Name 
SWAPPER 
20200182 JK Martin 

20200026 ERRFMT 

20200027 CACHE_SERVER 

20200028 CLUSTER_SERVER 

20200029 OPCOM 
2020002A SMISERVER 
2020002B JOB_CONTROL 
2020002C CONFIGURE 
2020002D SYMBIONT_0001 
2020002F NETACP 

20200030 EVL 
20200032 REMACP 
20200198 BECKER 



Notes on Example 3-1 

1 The JOB_CONTROL process 

2 A print symbiont process 



IWNY 19- 


-NOV- 


1987 19:05 


:46.42 Uptime 


9 02:31: 


19 


State 


Pri 


I/O 




CPU 


Page fits Ph. Mem 


HIB 


16 








00:00:41.04 








CUR 


5 


179 





00:00:06.32 


866 


201 


HIB 


8 


2381 





00:00:27.53 


70 


94 


HIB 


16 


6 





00:00:00.20 


60 


90 


HIB 


10 


6 





00:00:00.45 


104 


233 


T.F.F 


8 


1585 





00:00:25.52 


10798 


60 


HIB 


9 


61 





00:00:01.96 


218 


612 


HIB 


8 


13988 





00:02:29.72 


213 


473 


HIB 


10 


7 





00:00:00.37 


92 


128 


HIB 


6 


85 





00:00:03.92 


670 


46 


HIB 


10 


2143 





01:20:25.01 


3899776 


1500 


HIB 


6 


1003 





00:01:19.52 


189831 


49 


HIB 


8 


323 





00:00:01.68 


75 


45 


LEF 


4 


125 





00:00:03.56 


813 


155 
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Print Job Scheduling 



Job with highest queue priority executed first 

Smaller jobs executed before larger jobs (within the same priority group) 

— This is the default action 

Jobs executed in order of submission if they are same size and have same priority 
Priority of jobs in queues limited by two system parameters: 

— DEFQUEPRI 

— MAXQUEPRI 

Scheduling can be changed to "first-come-first-served" with the qualifier /SCHEDULE=NOSIZE 



Figure 3-2: Print Queue 



JOB 
229 


[job 

I 230 


JOB 
231 



EXECUTION QUEUE LPAO 




JOB 
22B 



DEVICE 
LPAO: 



TTB X0357 BB S 
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Example 3-2: Scheduling Print Jobs 

$ 

$ SHOW QUEUE LP AO /FULL 

Printer queue LPAO 

/BASE_PRI0RITY=4 /DEFULAT= (FLAG) /FORM=DEFAULT Lowercase 
/OWNER=[ SYSTEM] /PROTECTION=(S:E,0:D, G:R, W:W) 

Jobname Username Entry Blocks Status 



ACTION JONES 228 6 Printing 

Submitted 13-DEC-1987 12:02 /FORM=DEFAOLT /PRI0=4 
_DRA1 : [JONES] ACTION . COM; 1 /COPIES=2 

NOTES JONES 231 12 Pending 

Submitted 13-DEC-1987 12:15 /FORM=DEFAULT /PRIO=6 
_DRA1 : [ JONES ] NOTES . TXT ; 1 2 

3 
MEMO JONES 230 1 Pending 

Submitted 13-DEC-1987 12:08 /FORI^DEFAULT /PRI0=4 
_DRA1 : [ JONES ] MEMO . MEM; 1 

MATH JONES 229 6 Pending 

Submitted 13-DEC-1987 12:04 /FORM=DEFAULT /PRI0=4 
_DRA1: [JONES]MATH.LIS;l 
S 
$ 

Notes on Example 3-2 

1 Job 228 is cun^ently executing. Tiie JOB_CONTROL process examines the parameters of 
the pending jobs to detemriine which job it will print next. 

2 Since Job 231 has the highest priority of the pending jobs, it will be printed next. 

NOTE 
The priority of a job in a queue is limited by two system parameters: 

• DEFQUEPRI - the default queue priority assigned to all print jobs 

• MAXQUEPRI - the maximum queue priority any user can assign to a job (range 
is 0-255) (Regardless of the values of these parameters, users with OPER or 
ALTPRI privilege can submit jobs at any priority using the /PRIORITY qualifier.) 

3 Job 230 is smaller than Job 229, and they have the same priority, so Job 230 will be printed 
third. 

4 Finally, Job 229 will be printed. However, if another job is submitted before Job 229 begins 
printing, the JOB_CONTROL process will examine the parameters of Job 229 and the new 
job to determine which job it will print first. 
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PRINT QUEUE OPERATIONS 



Types of Print Queues 



Four types of print queues: 

Printer execution queue 
Terminal execution queue 
Generic queue 

Logical queue 



Feeds a physical printer 

Feeds a physical printer attached to a terminal line 

Feeds execution queues enabled with /ENABLE_ 
GENERIC attribute 

Feeds execution queue associated with ASSIGN/QUEUE 
command 



System moves jobs from generic and logical queues to execution queues 

— Will not move jobs from generic queues to execution queues initialized with 
/NOENABLE_GENERIC qualifier 

— Execution queues given /ENABLE_GENERIC attribute by default 
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Creating Print Queues 



To establish a print execution queue (requires OPER privilege): 

— Set physical attributes of device 

— Spool device 

— Initialize and start an execution queue for device 

Queues can be created either: 

— Interactively 

— Automatically 

Can create and start queues using one or more commands 



Table 3-2: Initializing and Starting Queues 
Command 



$ INITIALIZE/QUEUE [/qualifiers] queue-name 



$ START/QUEUE [/qualifiers] queue-name 



$ INITIALIZE/QUEOE/START [/qualifiers] 
queue-name 



Comments 



Creates the queue. If the queue is already 
running, this command has no effect. If a 
queue exists but Is stopped, you can use this 
command to modify queue parameters. Jobs 
listed in the queue and new jobs will execute 
under the new parameters. 

Starts a stopped queue. If the queue Is 
already running, the system displays an error 
message. 

Creates and starts a queue. Include this 
command for each queue in the procedure 
SYSTARTUP_V5.COM. If the queue is already 
running, this command has no effect. 
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Table 3-3: Creating and Using Print Execution Queues 



Operation 



Creating a 
Printer Queue 



Creating a 
Terminal Queue 



Determine 
the device 

Set the 

device 

attributes 



$ SHOW DEVICE L 

$ SET PRINTER - 
$ /UPPER LPAO 



$ SHOW DEVICE T 

$ SET TERMINAL - 
_$ /PERMANENT - 
_$ /NOTYPEJ^EAD - 
_$ /SPEED=2400 - 
$ /NOBROADCAST TTA3 



Spool the 
device 


$ SET DEVICE - 
_$ /SPOOLED LPAO 


$ SET DEVICE - 

_$ /SPOOLED-WORKl - 

_$ TTA3 


Create and 
start the 
queue 


$ INITIALIZB/QDEDE - 
_$ /START/OH-LPAO - 
_$ SYS$PRINT 


$ INITIALIZE/QOEOE 
_$ /TERMINAL - 
_S /START/0N-TTA3 - 
_$ SYS$PRINT 


Ust the 

device 

queues. 


$ SHOW QOEDE/ALL - 
_$ /DEVICE 


$ SHOW QUEOE/ALL - 
_$ /DEVICE 


Use the 
queue 


$ PRINTFILE.DAT 


$ PRINT FILE. DAT 



Comments 



List the devices and select 
one. 

Set the attributes of the 
printer or terminal to match 
its physical attributes or to 
force the printer to produce 
specific output. (For example, 
/UPPER causes all jobs to 
be printed in uppercase.) 
Terminals must have certain 
attributes set as shown (speed 
should be specified to match 
the terminal speed) 

Enables COPY commands 
and write statements for that 
device; you can specify an 
intermediate device or use 
the current default device 
(SYS$DISK). 

Assign it a different name than 
its device name if desired by 
using the /ON qualifier. (By 
default, the name of the 
queue matches the name of 
the printer.) 

Displays ail execution queues. 



Since the PRINT command 
sends files to the SYS$PRINT 
queue by default, and the 
name of the print execution 
queue for the LPAO printer 
is SYS$PRINT, the first com- 
mand prints FILE.DAT on 
LPAO. The second command 
is similar, but the SYS$PRINT 
queue is defined to print on 
TTA3. 
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Creating Generic Print Queues 

Establish generic print queues when you have more than one printer set up in the same fashion, 
and want to share the processing among the printers. 



Table 3-4: Creating and Using Generic Print Queues 



Operation 



Command 



Comment 



Create an execution 
queue for a printer 



Create an execution 
queue for another printer 



Create a generic print 
queue 

Use the generic print 
queue 



$ SET PRINTER/UPPER LPAO 
$ SET DEVICE/SPOOLED LPAO 
$ INITIALIZE/QUEOE/START 
LPAO 

$ SET PRINTER/OPPER LPBO 
$ SET DEVICE /SPOOLED LPBO 
$ INITIALIZE/QOEUE/START 
LPBO 

$ INITIALIZE/QUEUE/START ■ 
_$ /GENERIC SYS$PRINT 

$ PRINT FILE. DAT 



For example, the printer device 
LPAO. 



For example, the printer device 
LPBO. 



This queue will receive default 
print jobs. 

SYS$PRINT is the default queue 
for the PRINT command. In 
this example, SYS$PRINT is a 
generic print queue. The file 
will be printed on LPAO if It is 
available. If LPAO is not available, 
and LPBO is available, the file will 
be printed on LPBO. 
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Creating Logical Print Queues 

Establish logical queues to hold jobs 

— Requiring special paper or printer attributes 

— Requiring the presence of an operator or other authorized personnel to print 

— When you want to control which printer is used 

Table 3-5: Creating and Using Logical Queues 



Operation 



Command 



Comment 



Create an execution 
queue 



$ SET PRINTER/UPPER LPCO 

$ SET DEVICE /SPOOLED LPCO 

$ INITIALIZE/QUEUE/START LPCO 



Create a logical queue $ initialize/qoede afters 



Use the logical queue 



Associate the logical 
queue with the execution 
queue.f 



$ PRINT/QUE0E-AFTER5 PILE. DAT 



$ ASSIGN/QUEUE LPCO AFTERS 



Start the logical queue $ start/queoe afters 



Use the logical queue 



$ PRINT /QUEUE=AFTER5 TEXT. DAT 



For example, use LPCO 
as the execution queue. 
Set the device to be 
spooled and to print only 
In UPPERCASE. 

Note that the /START 
qualifier is not valid for 
logical queues. 

Jobs are listed in the 
queue but are not exe- 
cuted. 

This tells JOB_CONTROL 
to "feed" LPCO jobs from 
the AFTERS queue once 
the AFTERS queue is 
started. 

The listed jobs will be 
executed on the LPCO 
printer. 

The job is listed in the 
AFTERS queue, and is 
moved to the LPCO queue 
to be printed as soon as 
the printer is available. 
Jobs will continue to be 
processed In this way until 
the association is broken 
(by using the command 
DEASSIGN/QUEUE). 



t A logical queue does not have to be associated with an execution queue. It can be used simply as a holding 
queue for large jobs, jobs requiring special paper, or other types of jobs. The operator moves these jobs to specific 
execution queues to be printed when it is apptopiiaite (see Table 3-17). 
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Figure 3-3: Current, Pending, and Holding Jobs 



JOB 
498 



EXECUTION QUEUE TERM 




DEVICE 
TTA3: 



EXECUTION QUEUE LPAO 




JOB 
495 



/ 



GENERIC QUEUE SYS$PHINT 



< 



DEVICE 
LPAO: 



\ 



\ 



V 



JOB 
496 



EXECUTION QUEUE LPBO 




DEVICE 
LPBO; 



JOB 

491 



JOB 
492 



JOB 
493 



JOB 
497 



LOGICAL QUEUE AFTERS 



JOB 
320 




JOB 
3B9 



LOGICAL QUEUE FORM3 



> 



^ 



EXECUTION QUEUE LPCO 




DEVICE 
LPCO: 



JOB 
494 



JOB 
411 




JOB 
419 



LOGICAL QUEUE OVERNIGHT 



> 



TTB X0358_88..S 
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Example 3-3: Queue Status Display of Current, Pending, and Holding Jobs 



$ SHOW QUEUE/DEVICES/GENERIC 

Logical queue AFTERS, assigned to LPCO 



Jobname Username 

LATER JONES 

Printer queue F0RM3, stopped 



Jobname 

MATH 
TEST 



Username 

JONES 
JONES 



Entry Blocks Status 
497 1 Pending 

Entry Blocks Status 



389 
320 



5 Pending 
7 Pending 



Printer queue LPAO 

Jobname Dsername 



MEMO JONES 

Printer queue LPBO 

Jobname Username 



Entry Blocks Status 
492 1 Printing 

Entry Blocks Status 



ACTION 
TABLES 



JONES 
JONES 



493 
496 



1 Printing 
21 Pending 



Printer queue LPCO 

Jobname Username 



Entry Blocks Status 
494 1 Printing 



FORTE ST JONES 
Printer queue OVERNIGHT, stopped 

Jobname Username Entry Blocks Status 



LONG 
BIG JOB 



JONES 
JONES 



419 

411 



400 Pending 
478 Pending 



Generic printer queue SYS$PRINT 

Jobname Username Entry Blocks Status 

MEMO JONES 495 1 Pendinc 

Terminal printer queue TERM, on TTA3 : 

Jobname Username Entry Blocks Status 



PROG 
NOTES 



JONES 
JONES 



491 
498 



10 Printing 
9 Pending 
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Automatic Queue Creation 

Include queue commands in SYS$MANAGER:SYSTARTUP_V5.C0M to create and start 
queues at system startup 

— Even better to include a line in SYS$IVIANAGER:SYSTARTUP_V5.COM to invoke a 
separate command procedure to start up queues 

System shutdown procedure stops all queues (SYS$SYSTEM:SHUTDOWN.COM) 

— More detail on queue shutdown found in the module Starting Up and Shutting Down 
the System. 



Example 3-4: Startup Commands In SYSTARTUP_V5.COM 

$ SET NOON 

$ ! 

$ ! Start up the queue manager before issuing emy other queue commands 

$ ! 

$ START/QDEOE/MANAGER 

$ ! 

$ ! Define and start up printer queues 

$ ! 

$ SET PRINTER/LOWER LPAO 

$ SET DEVICE/SPOOLED LPAO 
^ INITIALIZE/QOEOE/START/DEFAULT= (BURST, FLAG) LPAO 

S SET PRiNTER/lOWER LPBO" ~^- —— - 

$ SET DEVICE /SPOOLED LPBO 

$ INITIALIZE/QOEOE/START LPBO 

$ ! 

$ SET PRINTER/LOWER LPCO 

$ SET DEVICE/SPOOLED LPCO 
-^ INITIALIZE/QUE0E/N0ENABLE_6ENERIC LPCO 

I ! Define and start up a generic print queue 

$ ! 
-1?- INITIALIZE/QOEOE/GENERIC/START SyS$PRINT 

$ ! 

$ ! Define a special logical queue and assign it 

$ ! to execution queue LPCO, but don't start it yet 

$ ! 

$ INITIALIZE/QOEOE AFTERS 

$ ASSIGN/QUEUE LPCO AFTERS 

$ ! 

$ Define other logical queues 

$ ! 

$ INITIALIZE/QUEUE OVERNIGHT 

$ INITIALIZE/QUEOE F0RM3 

$ 
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Monitoring Print Queues 

Use the SHOW QUEUE command to monitor an entire queue: 

$ SHOW QUEUE [/qualifiers] [queue-name] 

$ SHOW QUEUE/SDMMARY/DEVICE= (PRINTER, TERMINAL) 

Default action is to display status of all queues and all jobs owned by you 

Queues are displayed in alphabetical order 

Qualifiers provide selection of the type and amount of queue information to be displayed 

Queue status codes indicate current state of the queue (see Table 3-8) 



Table 3-6: SHOW QUEUE Qualifiers for Displaying lypes of Queues 



Qualifier 



/BY_JOB_STATUS=status- 
type 

/BATCH 
/DEVICE=execution-type 

/GENERIC 



Description 



Displays queues that contain jobs of a specified type of status. 
If no keyword is specified, by default the jobs of all status are 
displayed. 

Displays the status of batch execution queues. 

Displays the status of output execution queues. If no keywords 
are specified, all types of output queues are displayed. 

Displays the status of generic queues. 



Table 3-7: SHOW QUEUE Qualifiers for Displaying the Amount of Queue Information 



Qualifier 



/ALL_JOBS 
/BRIEF 

/FULL 
/SUMMARY 



Description 



Displays infonnation about all jobs for the selected queue. 

Displays a brief listing of information about job entries in the queue. 
The brief listing is the default when no qualifier is specified with the 
SHOW QUEUE command. 

Displays complete queue and job information, including any ACLs set 
for the queue. 

Displays the total number of executing, pending, holding, retained, and 
time-released jobs. 
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Table 3-8: Queue Status Codes 



Status Code 



Description 



aligning 

device unavailable 

pausing 

paused 

resuming 

resetting 
operator service 
stalled 

stopping 

stop pending 
stopped 

starting 



The queue manager is processing a START/QUEUE/ALIGN command. 

Device to wliicii thie print symbiont is assigned is not available. 

The queue manager is processing a STOP/QUEUE command. 

A STOP/QUEUE command has been executed. 

The queue manager is processing a START/QUEUE command on a 
paused queue. 

The queue manager is processing a STOP/QUEUE/RESET command. 

A PRINT/OPERATOR command has been executed. 

Print symbiont processing temporarily hatted due to a device related 
problem. 

The queue manager is processing a STOP/QUEUE command specified 
with either a /NEXT, REQUEUE, or RESET qualifier. 

Queue will be stopped when current jobs have finished executing. 

A STOP/QUEUE command specified with either a /NEXT, REQUEUE, 
or RESET qualifier has been executed. 

Queue has been started, but the print symbiont process is not yet 
active. 
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Monitoring Print Jobs 



Use the SHOW ENTRY command to monitor individual jobs: 

$ SHOW ENTRY [/qualifiers] [entry-number] 
$ SHOW ENTRY 228 

Most SHOW QUEUE qualifiers can be used to select the type and amount of queue 
information to be monitored 

Queue status codes indicate current state of the job 



Table 3-9: Job Status Codes 



Status Code 



Description 



aborting 

executing 

holding 

holding until 

pending 

printing 

processing 

retained on conpletion 

retained on error 

waiting 



Executing job is terminating. 

Job is executing from a batch queue. 

Job is being held until explicitly released. 

Job is being held until a specified time. 

Job is in a wait state, typically waiting to be processed. 

Job is executing from a printer or terminal execution queue. 

Job is executing from a server queue. 

Job remains in the queue upon completion. 

Job remains in the queue upon encountering an error. 

Symbiont refuses the job. 
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Setting Print Queue Attributes 



Some attributes can be modified 

— Owner (defaults to thie user of the process creating tfie queue) 

— Base priority 

— Printer form definition 

— Protection code 

— Number of separation pages for print jobs 

— Maximum and minimum allowed sizes of print jobs 

— Printer characteristics 



Table 3-10: Commands to Modify Queue Attributes at Certain Times 



Command Wlien to Use 



iNiTiALizE/QOEUE When the queue is being created (does not currently exist) 
SET QUEUE After the queue has been created, but is currently stopped 

START/QUEUE 
INITIALIZE/QUEUE 

SET QUEUE When the queue exists and Is cun-ently running. Note that not all 

parameters can be changed while the queue Is mnning. 



Example 3-5: Modifying a Running Queue 

$ 

$ SHOW QUEUE /FULL LPAO 
Printer queue LPAO 

/BASE_PRI0RITY=4 /FORM=DEFAULT Lowercase /OVniER= [ SYSTEM] 

/PROTECTION=(S:E,0:D,G:R,W:W) 

$ 

$ SET QUEUE/SEPARATE= (BURST, TRAILER) LPAO 

$ 

$ SHOW QUEUE /FULL LPAO 

Printer queue LPAO 

/BASE_PRI0RITY=4 /FORM=DEFAULT Lowercase /OWNER= [ SYSTEM] 
/PROTECTION=(S:E,0:D,G:R,W:W) /SEPARATION= (BURST, TRAILER) 

$ 

$ PRINT/HEADER MEMO. TXT 

Job MEMO (queue SYS$PRINT, entry 349) started on SYS$PRINT 

$ 
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Specifying Separation Pages 

Separation pages are used to delineate between individual jobs and individual files within 
the jobs 

— Job separation pages 

— File separation pages 

Defaults can be set for separation pages on a queue (system default is no separation 
pages) 

— Use /SEPARATE=optlon for job separation pages 

— Use /DEFAULT=optlon for file separation pages 

— Users can override defaults set for file separation pages 

— Users cannot override defaults set for job separation pages 

• Order of printed pages when all possible file and job separation page defaults are set: 

1 . Job burst page {/SEPARATE=BU RST) 

2. Job flag page (/SEPARATE=FI-AG) 

3. File burst page (/DEFAULT=BURST) 

4. File flag page (/DEFAULT=FLAG) 

5. File contents are printed 

6. File trailer page (/DEFAULT=TRAILER) 

7. System repeats previous four steps until all files in job are printed 

8. Job trailer page (/SEPARATE=TRAILER) 

Separation page attributes can be viewed with SHOW QUEUE/FULL 
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Example 3-6: SHOW QUEUE— Job and File Separation Page Defaults 



$ SHOW QUEUE/FULL LPCO 
Printer queue LPCO 

/BASE_PRI0RITY=4 /DEFAaLT= (FLAG) 

/FORM=DEFAULT Lowercase /OWNER= [ SYSTEM] /PROTECTION=(S:E,0:D, G:R, W:W) 

/SEPARATE= (BURST, FLAG, TRAILER) 
$ 
$ 



Table 3-11 : Job Separation Page Options for the /SEPARATE Qualifier 



Option 



Description 



[NO] BURST Specifies a copy of the flag page printed In such a way as to overprint 

the perforation between the preceding flag page. This makes it possible to 
determine job breaks in a stack of paper when viewed from the edge side of 
the paper. Note that if you specify a burst separation page, you do not need 
to specify a flag page, as it is printed automatically with the burst page. 

[NO] FLAG Specifies a page is printed preceding the job with the name of the user printed 

in large letters. 

[NO] TRAILER Specifies that a single summary sheet is printed following a job, with the 
name of the user printed in large letters. 



Table 3-12: File Separation Page Options for the /DEFAULT Qualifier 



Option 



Description 



[NO] BURST [=keyword] 



[NO] FLAG [=ke3^ord] 



[NO] TRAILER [=keyword] 



Specifies whether file burst pages will be printed. If the keyword 
is ALL (the default), a burst page is placed before each file in the 
print job. If the keyword is ONE, a burst page is placed before the 
first copy of the first file in the job. Note that if you specify a burst 
separation page, you do not need to specify a flag page, as it is 
printed automatically with the burst page. 

Specifies whether file flag pages will be printed. If the keyword is 
ALL (the default), a flag page is placed before each file in the print 
job. If the keyword is ONE, a flag page is placed before the first 
copy of the first file in the job. 

Specifies whether file trailer pages will be printed. If the keyword Is 
ALL (the default), a trailer page is placed at the end of each file in 
the print job. If the keyword is ONE, a trailer page is placed after 
the last copy of the last file in the job. 
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Figure 3-4: File Separation Burst and Rag Pages 
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Figure 3-5: File Separation Trailer Page 
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Figure 3-6: Job Separation Burst and Fiag Pages 
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Figure 3-7: Job Separation Trailer Page 
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Limiting Print Job Sizes 

Limiting tlie size of print jobs can establish different queues for different job sizes. 



Table 3-13: Setting Block Limits on Print Queues 



Qualifier/Example 



Comments 



/BLOCK_LIMIT= (minimum, maximum) 

$ INITIAL/QUEUE/ON=LPAO - 
_$ /BLOCK=(100,500) MEDIUM 

$ INITIALIZE/QUEUE/ON=LPB0 - 
_$ /BLOCK=(500,"") LARGE 

$ INITIALIZE/QUEUE/ON=LPC0 - 
$ /BLOCK=100 SMALL 



Size of jobs submitted to queue must be withiin 
specified range. 

Jobs smaller than 100 blocks or larger than 500 
blocks will not execute from the queue. 

Jobs smaller than 500 blocks will not execute from 
this queue. It is reserved for jobs larger than 500 
blocks. 

Jobs larger than 1 00 blocks will not execute from 
this queue. It is reserved for jobs smaller than or 
equal to 100 blocks. Notice that you do not need 
to include parentheses when you only specify an 
upper limit. 
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Controlling Print Queues 



Can stop or requeue currently executing Job without adversely affecting other jobs in queue 
Sometimes you need to stop a queue to fix problems or mal^e modifications 



Table 3-14: Aborting and Requeuing Jobs 



Possible Reason for 
Abort/Requeue 



Command 



Comments 



Job contains unprintable 
characters and is using 
excessive amounts of paper. 

Current job is not as impor- 
tant as job recently queued. 
Requeue it to execute later. 



Job is too large for this 
queue or its attributes are 
wrong. Move it to a more 
appropriate queue. 

Current job is not as im- 
portant as more recently 
submitted job. Requeue 
current job to be executed 
later. 



$ STOP/ABORT queue-name 



$ STOP/REQOEOE queue-name 



$ STOP/REQUEUE=new-queue-name 
_$ queue-name 



$ STOP/ENTRY=job-number - 
_$ /REQUEUE queue -name 



Aborts currently execut- 
ing print job. Next job 
begins printing. 

Current print job is 
aborted and moved to 
the end of the same 
queue. Next job begins 
printing. 

Current job is aborted 
and moved to the end of 
the new queue. Next job 
begins executing on the 
original queue. 

Current job is stopped 
and placed at the end of 
the queue. The job with 
the next highest priority 
will begin executing. 
(The more important 
job should have been 
submitted with sufficiently 
higher priority to be the 
next job to execute.) 
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Table 3-15: Stopping Queues 



Possible Reasons for 
Stopping a Queue 



Command 



Comments 



Temporarily Suspend Queue Execution 



Paper is jammed in 

printer. Printer needs 

paper. 

Printer needs new 

ribbon. 



$ STOP/QUEOE - 
_S queue-name 



Stops queue. Suspends execution 
of current job. No new jobs can be 
initiated until queue is restarted with the 
START/QUEUE command. 



Orderly Shutdown of a Queue 



Queue must be deleted 
or reassigned, or the 
Jobs in it must be moved 
to another queue. 



$ STOP/QUEOE/NEXT 
$ queue-name 



Stops queue after the currently ex- 
ecuting jobs are completed. Queue 
must be stopped before t>eing deleted 
or reassigned, or before jobs can be 
moved. 



Immediate Shutdown of a Queue 



You cannot stop or 
delete the current job. 
A previous queue con- 
trol command did not 
produce the desired 
effect. 



$ STOP/QUEUE/RESET 
_$ queue -naune 



Abnjptly stops queue and stops all 
currently executing jobs. After this 
command, you have complete control 
over the queue and the jobs in it. 



Close a Queue 



No more jobs should be 
entered into a queue. 



$ SET QUEOE/CLOSE 
_$ queue-name 



Prevents jobs from being entered in the 
queue through the commands PRINT 
or SUBMIT, or as a result of requeue 
operations. To allow jobs to be entered, 
use the command SET QUEUE/OPEN. 



Orderly Shutdown of All Queues 



All queue processing 
and execution must 
stop. 



$ STOP/QOEDE/MANAGER 



Performs an orderly shutdown of all 
queues. Use START/QUEUE/MANAGER 
to restart the queue manager, then 
restart all queues, either manually or 
through a command procedure. 
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Change the assignment of a logical queue 

— When the queue's associated execution queue fails and you can process the jobs on 
another printer 

— When a different printer Is desired for processing existing jobs 



Table 3-16: Assigning and Deasslgning Logical Queues 



Operation 



Command 



Example 



Change the as- 
signment of the 
queuef 



$ STOP /QUEUE - 

_S logical-queue-naune 

$ ASSIGN/QUEUE - 

_$ execution-queue-name 

_$ logical-queue-neune 



$ STOP /QUEUE MEMOS 

$ ASSIGN /QUEUE LASER2 MEMOS 



Remove the as- 
signment of the 
queue 



$ STOP/QUEUE logical-queue-name 
$ DEASSIGN/QUEUE logical-queue- 



$ STOP/QUEUE SPECIAL_PRINTS 

$ DEASSIGN/QUEUE SPECIAL PRINTS 



tYou can assign a logical queue to only one execution queue at any time, but you can assign it to a different 
execution queue at any time. 
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Keep jobs from being entered in a queue: $ SET QUEUE/CLOSE 

— Use SET QUEUEOPEN to allow jobs to be entered in queue 
Moving jobs from one queue to another 

— Stop queue witii STOP/QUEUE/NEXT before moving jobs so tiiat no more jobs will be 
executed 

— Requeue cunrent job if queue is an execution queue 

— Use SET QUEUE/CLOSE to keep additional jobs from being entered In thie queue, If 
desired 



Table 3-17: Moving Jobs from One Queue to Another 



Example: LPAO needs repair, 
Operation Command Format LPBO Is still operational 

Move all jobs from $ assign/merge - $ stop/queue lpao 

one queue to an- _$ destinatlon-queue-name S STOP/QOEUE/REQOEUE=LPB0 LPAO 
other. _S source-queue-name S ASSIGN/MERGE LPBO LPAO 
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Deleting a queue 

— Issue STOP/QUEUE/NEXT before deleting the queue 



Table 3-18: Deleting a Queue 


Command Format 


Example 


$ DELETE/QUEUE queue-name 


$ STOP/QUEDE/NEXT LPAO 
$ DELETE/QOEOE LPAO 



Deleting jobs In queues 

— Can delete jobs when queue is running or when queue is stopped 

— Can delete jobs when restarting queue 



Table 3-19: Deleting a Job In a Queue 



Operation 



Command Format 



Example 



Delete a job In a 
queue. 

Delete the current 
job when restarting 
a print execution 
queue. 



$ DELETE/ENTRY= job-number 

$ START/QUEUE/NEXT queue-name 



$ DELETE/ENTRY=715 



$ START/QUEUE/NEXT LPAO 



Managing Queues 3- 35 



Managing Printer Forms and Characteristics 

A print queue has a print form associated with it describing aspects of the paper (called 
stock) and the print image area: 

— Stocl< name 

— Left, right, top, and bottom margins 

— Width of each line (in printable character columns) 

— Length of the print image area (in lines) 

A print queue can also have one or more characteristics 

— Further specifies the intended use of the queue, or other special attributes 
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Creating Print Forms and Characteristics 



Use the DEFINE command: 

$ DEFINE/FORM form-name form-nvimber [/qualifiers] 

$ DEFINE/FORM CHECK 43 /DESCRIPTION="Company Bank Check" /LENGTH=24 /WIDTH=95 

$ DEFINE/CHARACTERISTIC characteristic-name characteristic-niomber 
$ DEFINE/CHAR RED 3 

Form and characteristic names 

— Arbitrary strings of between 1 and 31 characters 

— Characters include both uppercase and lowercase letters, digits, dollar sign, underscore 

— String must contain at least one nonnumeric character 

— Name must be unique on the system 
Form and characteristic numbers 

— Arioitrary, unique numbers 

— Form numbers can range from to 999 

— Characteristic numbers can range from to 1 27 

• Use the SHOW QUEUE/FORM and SHOW QUEUE/CHARACTERISTIC commands to 
monitor existing form and characteristic definitions 

Example 3-7: Displaying Queue Forms and Characteristics 



$ SHOW QUEUE /FORM 
Form name 



ALLINl (stock=DEFAULT) 

BORDER (stock=DEFAULT) 

DEFAULT 

FRAME (stock=DEFAOLT) 

TEMP 

WPSPLUS (stock=DEFAULT) 

S 

S 

$ SHOW QUEUE/CHARACTERISTICS 

Characteristic name 



PEN_010 
PEN_020 
PEN_050 
RED_INK 
S 



Number Description 



99 
4 

3 
6 
1101 



Number 



5 
6 

7 
74 



AliLINl Memos 
Border Outline 
System-defined default 
Overhead Frame 
Special temporary 
WPSPLOS Documentation 
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Table 3-20: Qualifiers for the DEFINE/FORM Command 



Qualifier 



Description 



/DESCRIPTION=string 

/LENGTH=n 

/MARGIN= (option [,...]) 



/PAGE SETOP= (module [,...]) 



/SETOP= (module [,...]) 



/SHEET FEED 



/STOCK=string 



/TRUNCATE 



/WRAP 



/WIDTH=n 



Assigns a description to the form. Can be as long as 255 
characters, with the default being the name of the form. 

The physical form length in lines. The default is 66 lines. 

Specifies one or more of the following four margin options: 
LEFT=n The number of columns to be left blanl< 

between the left-most printing position and 
the actual print image area. 

RiGHT=n The number of columns to be left blank 

between the /WIDTH setting and the actual 
print image area. 

TOP=n The number of blank lines to leave 

between the top of the physical page of 
paper and the start of the print image. 

BOTTOM=n The numbor of blank lines to leave 

between the end of the print image on a 
page and the end of the physical page of 
paper. 

Specifies one or more modules that set up the printer before 
every page. 

Specifies one or more modules that set up the printer before 
a file is printed. 

Tells the print symbiont associated with the queue to pause 
at the end of every physical page so that a new piece of 
paper can be inserted. 

The name of the paper stock associated with the form. The 
string can be from 1 to 31 characters, including all letters, 
digits, the dollar sign, and the underscore. The default for 
string is the form name. 

Tells the printer to discard all characters that would exceed 
either the /WIDTH value or the /IVIARGIN=RIGHT value. You 
cannot specify both /TRUNCATE and /WRAP for the same 
form. Specify /NOTRUNCATE and /NOWRAP for special 

graphics output devices. 

Tells the printer to print all characters exceeding either the 
/WIDTH value or the /MARGIN=RIGHT value on the next 
line. 

Specifies the physical width of the paper in terms of columns 
or character positions. 
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Using Forms and Characteristics with Printer Queues 

Once a form or characteristic is defined, you can use the /FORMMOUNTED qualifier with the 
following commands to associate it with a queue: 

INITIALIZE/QUEUE 
START/QUEUE 
SET QUEUE 



Table 3-21: Defining Printer Forms and Characteristics 



Commandt 



Comments 



$ INITIALIZE/QDEUE - 
$ /CHARACTERISTICS= (number or name, [ , . . . ] ) t 



$ DEFINE/CHAR REDINK 2 

$ INITIALIZE/QOEUE/START/CHAR=REDINK PLOTTER 

$ PRINT/CHaR=REDINK/QUEUE=PLOTTER FILE. DAT 



$ INITIALIZE/QUEOE/FORM= (number or name, (,...]) 



$ DEFINE/FORM WIDE 2 

$ INITIMiIZE/QDEUE/START/FORM=WIDE LPAO 

$ PRINT/FORM=WIDE/QUEUE=LPA0 FILE. DAT 



Characteristics of jobs must match or 
be a subset of queue characteristics 
for the job to execute. The command 
DEFiNE/CHARACTERISTICS sets 
up a correspondence between the 
characteristic name and number. 
Note that a characteristic must 
already be defined before it can be 
used with a queue. 

Set up the characteristic name 
REDINK to correspond to the number 
2. Specify the REDINK characteristic 
as a characteristic of the PLOTTER 
queue. Only jobs sent to this queue 
that specify the REDINK characteristic 
by name (or number) will be executed 
from this queue. Other jobs will be 
placed on hold. 

Limits jobs to those whose form 
name (or number) matches that of 
the queue. Note that a form must 
already be defined before it can be 
used with a queue. 

Define a new form called WIDE and 
initialize (and start) the LPAO queue 
with this new form. 

Submit a request to print FILE.DAT 
on the LPAO queue with the WIDE 
form. 



tit is generally considered a bad practice to specify forms or characteristics by their numbers. You should strive 
to use the form or characteristic name to better document the intended action and to keep from inadvertently 
specifying tlie wrong form or characteristic. 
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Handling Print Queue Problems 

Problems can arise with printers: 

— Paper jams 

— Paper ran out 

— Ribbon tear or poor print density 

You might have to reprint part or all of the job 

The commands needed to reprint problem jobs can also be used to set up a printer for 
special print situations 

— Bank check printing 

— Invoices 

Use positioning and alignment qualifiers to handle these situations 

Table 3-22: Positioning a Print Job 

Qualifier to START/QUEUE Comments 

/BACKWARD=n File is backspaced n pages before printing is resumed. 

/FORWARD=n File is fonward spaced n pages before printing is 

resumed. 

/sEARCH=string Rosumes printing with page containing string. (Search 

direction is fon/vard. Other qualifiers processed first.) 

/TOPOFFiLE Printing begins at top of interrupted file (not top of job). 



Table 3-23: Aligning Printer Paper 

Command Format/Examples Comments 

$ sTART/QUEOE/flLiGN - One page of the job is printed. The queue stops. Adjust 

_$ queue-name the paper and restart the queue. 

$ sTARi/QUEUE/BACKWARD=2 - You can back up several pages before beginning the 

_$ /ALiGN=2 LPAo reprint. In this example, the symbiont backs up two pages 

$ START/QUEUE LPAO In the job, then prints two alignment pages and stops. The 

user adjusts the paper and restarts the queue. The system 
begins printing the next page in the job. 
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HOW VMS HANDLES BATCH JOBS 

Batch queues solve waiting problems and make best use of terminal and card reader 
resources 

SUBMIT command places batch job in queue 

Batch queues must exist for VMS to execute batch jobs 

• Batch queue Information stored In SYS$SYSTEM:JBCSYSQUE.DAT 



Figure 3-8: JOB_CONTROL Process Handles All Batch Jobs 
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When the JOB_CONTROL process schedules a batch job to execute, it creates a batch 
process in which to execute the job 

— Name of process composed of word BATCH and job's queue entry number 

— Jobs listed in queue as currently executing 

— Batch process appears in SHOW SYSTEM display with "B" In right hand column 



Example 3-8: JOB_CONTROL, Input Symblont, and Batch Job Processes 



$ SHOW SYSTEM 

VAX/ VMS V5.0 on node BROWNY 13-DEC- 

Pid Process Name State Pri 

20200021 SWAPPER HIB 16 

202001A2 Ed Bernstein LEF 6 

20200026 ERRFMT HIB 9 

20200027 CACHE_SERVER HIB 16 

20200028 CLaSTER_SERVER HIB 8 

20200029 OPCOM LEF 8 
202001B8 BATCH_103 COR 3 
2020002A SMISERVER HIB 9 
2020002B JOB_CONTROL HIB 9 
2020002C CONFIGURE HIB 10 
2020002D SYMBIONT_0001 HIB 6 
20200196 JK Martin LEF 4 
20200039 NETACP HIB 10 
202001A3 _CRAO: LEF 4 
2020003A EVL HIB 6 
2020003B REMACP HIB 9 
$ 

S 



1987 12:12 

I/O 



17322 

3206 

6 

6 

40150 

80 

68 

1875 

7 

132 

985 

25671 

2501 

43834 

122 



24.68 
CPO 
00:00! 
00:05i 
00:00i 
00:00; 
00:00: 
00:09! 
00:00: 
00:00: 
00:00 
00:00 
00:00: 
00:00: 
05:56; 
00:00; 
00:10! 
00:00! 



Uptime 12 22:30:54 

Page fits Ph. Mem 



15.79 
08.44 
41.04 
00.17 
00.41 
32.53 
02.93 
02.09 
14.57 
00.52 
05.58 
26.96 
18.63 
58.87 
08.40 
00.94 





7888 

71 

61 

102 

26113 

588 

220 

207 

93 

1129 

5140 

11846645 

50 

544317 

76 





997 

95 

91 

231 

132 

259 

614 

412 

128 

46 

160 

1500 

41 

50 

45 



B 2 



Notes on Example 3-8 

1 Batch process. 

2 The letter "B" indicates that this process is executing a batch job. 

3 The JOB_CONTROL process. 

4 The input symblont process name Is the same as the device name of the card reader from 
which the job is read. 
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Batch Job Scheduling 

System manager limits number of jobs that can run concurrently from batcli queue 
JOB_CONTROL schedules batch jobs according to priority and submission time: 

— Jobs with highest queue priority execute first 

— Jobs execute in order of submission if they have the same queue priority 
Queue priority of job affects when job is scheduled to execute 

Base priority of batch process defined either by: 

— BASE_PRIORITY queue attribute 

— DEFPRI system parameter (if BASE_PRIORITY not specified) 

Figure 3-9: Jobs on a Batch Queue 
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Example 3-9: Current and Pending Jobs on a Batch Queue 

$ 

$ SHOW QOEaE/FOLL SYS$BATCH 
Batch queue SyS$BATCH 

/BASE_PRI0RITY=3 /J0B_LIMIT=2 /OWNER=[ SYSTEM] /PROTECTION= (S:E,0:D,GsR,W:W) 

Jobname Username Entry Status 



ACTION JONES 230 Executing 

1 Submitted 13-DEC-1987 12:44 /PRI0RITY=4 

_DJAO : [ JONES ] ACTION . COM; 2 (executing) 

MATH JONES 233 Executing 

Submitted 13-DEC-1987 12:57 /PRI0RITY=4 
_DJAO: (JONES] MATH. COM; 1 (executing) 

2 COMPOTE JONES 237 Pending 

Submitted 13-DEC-1987 13:41 /PRI0RITY=6 
_D JAO : [ JONES ] COMPUTE . COM; 7 (pending) 

3 ACTION JONES 236 Pending 

Submitted 13-DEC-1987 13:10 /PRI0RITy=4 
_DJAO : [JONES] ACTION . COM; 3 (pending) 

$ 
$ 

Notes on Figure 3-9 and Example 3-9 

1 Jobs 230 and 233 are cun-ently executing. The JOB_LIMIT attribute of the queue has a 
value of two, limiting the number of concurrent batch processes from this queue to two. 
Because the number of concument batch processes ainning from SYS$BATCH equals 
its job limit, Job 236 and Job 237 must wait to execute. Their status is pending. The 
JOB_CONTROL process examines the parameters of the pending jobs to determine which 
job it will execute next. 

2 Since Job 237 has a higher queue priority than Job 236, (see note 2 of Example 3-2) It will 
be executed next. 

NOTE 

Although the queue priority of a batch job helps to determine when it will be 
scheduled, the queue priority does not affect the base priority of the batch process. 
The base priority of batch processes is defined by: 

• The value of the BASE_PRIORITY queue attribute. In this case, two. 

The value of the system parameter DEFPRI. The system uses this value if you do 
not set the BASEPRIORITY attribute for a queue. 

3 Finally, Job 236 executes. However, if a user submits another job before Job 236 begins 
executing, the JOB_CONTROL process will compare the parameters of the new job with 
those of Job 236 to determine which job it will execute next. 
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BATCH QUEUE OPERATIONS 

Very similar to print queue operations 

Differ only slightly In creating and stopping queues 



Types of Batch Queues 

Two types of batch queues: 

Execution Executes batch job 
Generic Feeds execution queues 



Creating Batch Queues 

• Default system batch queue called SYS$BATCH 

— Default queue for SUBMIT command 

— Default queue for spooled jobs from card readers 

• You must create all batch queues (none are automatically created) 

• The /BATCH qualifier is required to create a batch queue 

Different i<inds of batch queues can be created for different kinds of environments 



{Managing Queues 3- 45 



Table 3-24: Batch Queue Names and Parameter Values 

Suggested Name and ' 

Purpose of the Queue 



GROUP360 

To be used by those 
whose group UIC is 360 
because they are working 
on a high-priority project. 



Parameters and Comments 



Set the owner UIC of the queue to [360,000]. Give GROUP 
users READ and WRITE access only. Give WORLD users 
no access. Set larger worthing set extent, CPU limits, and 
priority. Possibly Increase the job limit. 



FASTQUE 

To be used by all who 
need a job done quickly. 



Set the base priority at 5. Use default queue protection or 
possibly restrict use to a certain group, UIC, or ACL. Set job 
limit at 2, but limit the maximum CPU to a low value to keep 
the queue from taking over the system. Optionally use higher 
worthing set limits. 



SLOWQUE 

To be used by ail who 
want to run a batch 
job that affects system 
performance as little as 
possible. 



Set the priority at 3. DO NOT set to or 1 , as jobs may get 
very little CPU time and finish too slowly. Use default queue 
protection. Set job limit to 1. Use default worthing set limits. 



ZOOMQUE 

Very fast queue that you 
only start after hours or 
during lunch. 



Set the base priority at 6 or higher, but definitely set a low 
CPU limit. Use default queue protection. Set job limit to 
2. Set high woridng set limits. You should note, however, 
that setting a batch queue's default BASE_PRIORITY to a 
value higher than the normal interactive value is generally 
considered somewhat dangerous to system response time. 
You should carefully monitor any batch queue running in this 
fashion to avoid system degradation. 



CADCAM 

To be used by large, 
compute-intensive appli- 
cations, such as engi- 
neering, manufacturing, 
or modeling programs. 



Set up as shown with SLOWQUE, but increase worthing set 
limits to large values. Set CPU limit to very large value, 
or infinite. Optionally protect the queue for access by only 
specific user groups. 
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Table 3-25: Qualifiers to INITIALIZE/QUEUE for Batch Queues 



Qualifiers 



Examples 



Comments 



/JOB LIMIT 



$ INITIALIZE/QOEUE/BATCH 



$ /JOB LI»=2 FASTBAT 



Sets a limit on the number of batch 
processes that can run concurrently from 
one batch queue. The default is 1 . 



/BASE PRIORITY 



$ INITIALIZE/QOEUE/BATCH 



$ /BASE=5 FASTBAT 



Defines the base priority of a batch 
process. The system parameter DEFPRI 
sets the default. The higher the priority, 
the sooner it will be scheduled to mn. 
If many batch processes have priorities 
as high as, or higher than, interactive 
process priorities (default 4), they can 
degrade the performance for interactive 
users and the whole system. 



/PROTECTION 
/OWNER UiC 



$ iNiTiALizE/QOEOE/BATCH Limlts accoss to a quouo. 

_S /OWN=[ENG,PROJ5] - 
-$ /PROT=(S:RWED) 



/WSDEFAULT 
/WSQUOTA 
/WSEXTENT 
/DISABLE SWAPPING 



$ INITIALIZE/QUEOE/BATCH 

_$ /WSDEF=500 - 
_$ /WSQUOT=800 - 
_$ /WSEXT=2000 - 
_$ /DISABLE_SWAP - 
$ FASTBAT 



Defines memory management parame- 
ters for the batch process (limits worthing 
set size and adjustment allowed; sets 
swap or noswap). UAF values are the 
default. If you set high values for these 
and disable swapping of processes for 
the queue, you can use so much memory 
that system performance is degraded 
(because paging and swapping increases 
for interactive jobs). 



/CPUMAXIMUM 



$ INITIALIZE/QOEUE/BATCH 

_$ /CPOMAX=INFINITE - 
$ BIGJOBBAT 



Sets the maximum CPU limit to be 
assigned to a batch process from the 
queue. The default maximum is the CPU 
limit in the owner's UAF record. 



/CPUDEFAULT 



S INITIALIZE/QOEUE/BATCH 



_$ /CPUDEF=00:03! 
$ 3MINBAT 



00 



Sets default CPU limit assigned to batch 
processes from this queue. Othenwise, 
the default is the CPU limit in a users' 
UAF record or the value of /CPUMAXI- 
MUM for the queue. 
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stopping Batch Queues 



Can stop or requeue currently executing job without adversely affecting other jobs In queue 

— Need entry number for batch jobs: 

$ STOP/ENTRY=job-number queue-name 
$ STOP/ENTRY=205 SYS$BATCH 

Suspend cun-ent jobs when stopping queue: $ STOP/QUEUE 

Complete cun-ent jobs before stopping queue: $ STOP/QUEUE/NEXT 
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Example 3-10: Stopping Batch Queues 

$ 

$ SUBMIT ACTI0N.COM 

Job ACTION (queue SYS$BATCH, entry 911) started on SYS5BATCH 

$ 

$ STOP/QUEOE SYS$BATCH 

$ 

$ SHOW QUEOE/ALL SYS$BATCH 

Batch queue SYSSBATCH, paused 

Jobname Username Entry Status 



ACTION JONES 911 Executing 

$ 

$ SHOW SYSTEM/BATCH 

VAX/VMS V5.0 on node BROWNY 13-DEC-1987 13:30:24.38 Uptime 12 22:30:54 

Pid Process Name State Pri I/O CPU Page fits Ph. Mem 
202003C5 BATCH_911 SUSP 4 25 00:00:00.71 143 171 

$ 

$ START/QUEUE SYS$BATCH 

$ 

$ STOP/QOEOE/NEXT SYS$BATCH 

$ 

$ SHOW QOEUE/ALL SYSSBATCH 

Batch queue SYSSBATCH, stop pending 

Jobname Username Entry Status 

ACTION JONES 911 Executing 

$ 

$ SHOW SYSTEM/BATCH 

VAX/VMS V5.0 on node BROWNY 13-DEC-1987 13:31:46.62 Uptime 12 22:31:33 

Pid Process Name State Pri I/O CPU Page fits Ph. Mem 
202003C5 BATCH_911 LEF 4 25 00:00:00.71 143 171 

$ 

$ SHOW QUEUE/ALL SYSSBATCH 

Batch queue SYSSBATCH, stopped 

$ 

$ SHOW SYSTEM/ BATCH 

S 
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Restricting Access and Control of Queues 

Two methods to specify access and control of queues: 

— UlC-based protection 

— ACL-based protection 

By default, UlC-based protection Is used 

Default protection code for queues: (s:e,o:d,g:r,w:w) 

UiC-Based Queue Protection 

System uses queue protection mask and owner UlC of queue to restrict access and control 

Users placed in categories according to their UlC 

Each user category has all privileges assigned to lower categories 



Table 3-26: Categories of User 



Category 



System 
Owner 
Group 
World 



Comments 



User has a system UlC 

User UlC matches queue's owner UlC 

Group UlC number of user matches group UlC number of queue owner UlC 

User UlC does not match queue's owner UlC 



Table 3-27: Access to Queues 



Access 
Codes 



Read 
Delete 
Write 
Execute 



Access Allowed 



Can list the attributes of a job 

Can modify or delete any job, or delete the queue 

Can submit jobs to the queue 

Can affect the queue and/or all jobs In the queue (users with OPER privilege 
have E access to ail queues) 
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ACL>Based Protection 

In addition to UlC-based protection, a queue can be assigned ACLs 

— Provides finer specification of access and control 

— Allows access to specific users who cross UIC groups 
• Works in much the same manner as ACLs for files 

Offers additional capability through the Execute right 

— Provides for "local" operator capabilities 
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Table 3-28: Preparing a Privately Controlled Printer Queue 



Operation 



Command 



Comments 



Create identi- 
fiers 



$ SET DEFAULT SYS$ SYSTEM 
$ RUN AUTHORIZE 
UAF> ADD/ ID MFG_PRT 
OAI'> ADD /ID MFG PRT OPER 



Create the l\4FG_PRT 
identifier for users allowed 
to submit jobs to the 
print queue, and the 
iVIFG_PRT_OPER for 
users responsible for 
management of the queue. 



Grant identi- 
fiers to proper 
users 



UAF> GRANT/ ID MFG_PRT MFG_USER1 
UAF> GRANT/ ID MFG_PRT MFG_USER2 
UAF> GRANT/ ID MFG_PRT MFG_USER3 
UAF> GRANT/ ID MFG_PRT ENG_USER1 
UAF> GRANT/ ID MFG_PRT ENG_USER2 
UAF> GRANT/ ID MFG_PRT_OPER MFG_USER1 
UAF> EXIT 



Associate the IV!FG_PRT 
identifier with the five 
users, and give MFG_ 
USER1 the additional 
MFG_PRT_OPER identi- 
fier. 



Set queue 
protectiont 



$ SET QUEUE/PROTECTION=(S,0,G,W) MFG_LN03 

$ SET ACL/ACL=(IDENTIFIER=MFG_PRT_OPER, 

_$ ACCESS=READ+WRITE+DELETE+EXECOTE) - 
_$ /ACL=(IDENTIFIER=MFG_PRT, - 
_$ ACCESS=READ+WRITE+DELETE) - 
$ /OBJECT=QUEUE MFG LN03 



First, set the printer queue 
for NO ACCESS by any 
user by specifying a UiC 
mask with no access pa- 
rameters. Next, associate 
the two previously cre- 
ated identifiers with the 
MFG_LN03 printer queue. 
Note that the EXECUTE 
access type is what gives 
the f^FG_USER1 special 
queue control capabilities, 
such as starting and stop- 
ping the queue, modifying 
or deleting jobs, and so 
on. 



tThis example assumes the MFG_LN03 printer queue has already been created using one of the previously 
described queue creation procedures. 
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OVERVIEW OF QUEUE COMMANDS 

Most queue commands require either OPER privilege or Execute (E) access to the target 
queue. 



Table 3-29: Summary of Queue- Related DCL Commands 



DCL Command 



Command Description 



Creating/Controlling/Deleting Queues 



INITIALIZE/QUEUE 

ASSIGN/QUEUE 

ASSIGN/MERGE 

START/QUEUE 

STOP /QUEUE 

DEASSIGN/QOEUE 

DELETE/QUEUE 



Creates and Initialize a queue 

Assigns a queue to a device 

Moves jobs from one queue to another 

Starts or restart a queue 

Controls queue or current entry in it 

Deassigns a queue from a device 

Deletes a queue and ail its entries 



Setting Queue Attributes 



SET QUEUE 

SET ACL/OBJECT=QUEUE 

EDIT/ACL/OBJECT=QUEUE 

DEFINE/FORM 

DEFINE/CHARACTERISTC 



Sets various queue parameters 

Sets the access rights of a queue 

Edits the access rights of a queue 

Sets the characteristics of a form 

Defines the characteristic name and number in the 
system table 



Setting Job Attributes 



PRINT 
SUBMIT 
SET ENTRY 
DELETE/ENTRY 



Places an entry in a print queue 

Places an entry in a batch queue 

Changes the status of a pending entry in a queue 

Deletes a pending entry from a queue 



Monitoring Queue and Entry Status 



SHOW QUEUE 

SHOW ENTRY 



Displays status of entries in a queue 
Displays status of an individual job entry 
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SUMMARY 

• Queue facilities managed by JOB_CONTROL process 

— Started witii START/QUEUE/MANAGER 

• Queue information is l<ept in SYS$SYSTEM:JBCSYSQUE.DAT 

• Two classes of queues 

— Execution 

— Generic 

• Three types of queues 

— Execution 

— Generic 

— Logical 

• Two types of execution queues 

— Output 

Printer 

Terminal 

Server 

— Batch 

Two types of generic queues 

— Output 

— Batch 
Logical queues 

— A type of output execution queue 

— Has its output redirected to another execution queue 

Queues are created (and optionally started) with INITIALIZE/QUEUE 

• Queues are started with START/QUEUE 

— Typically done in system startup command procedure 
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Monitor queues and jobs with SHOW QUEUE and SHOW ENTRY 

Set queue attributes with INITIALIZeOUEUE, SET/QUEUE, and START/QUEUE 

Control queues with STOP/QUEUE and SET QUEUE 

Use separation pages to better distinguish between print jobs and their owners 

— Job separation pages are controlled by the system manager 

— File separation pages are specified by the system manager, controlled by the user 
Limit print job sizes to better control printer usage 

Use printer forms and characteristics to better manage printers and control output format 

Use several batch queues with varying parameters to Improve turnaround time and minimize 
system degradation 

Use UIC and ACL protection to Improve queue security and management 
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MODULE 4 
MANAGING DISK AND TAPE VOLUMES 
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INTRODUCTION 

System managers must decide how to allocate the disk and tape devices on their systems. 
They normally allocate some for public use and some for private use. 

Public volumes are disk volumes that all users on the system can access. They contain system 
code, system data, and files useful to all users. Private volumes are disk and tape volumes that 
only a single user or group of users can access. Private volumes typically contain user-specific 
or group-specific code or data. 

The system manager coordinates disk and tape management with the system's users and 
operators. The manager decides whether a volume will be public or private. The manager 
loads, initializes, mounts, unloads, and maintains public volumes. Usere (possibly with the help 
of the manager or an operator) do the same for private volunftes. 

Maintenance of public volumes includes: 

Allocating disk space to users 

• Tracking the use of disk space (with the SYSMAN utility) 
Scheduling backups 

Installing system software and layered product software on the volume 
Monitoring device errors, (MODULE 8, discusses monitoring device errors in more detail.) 
The manager also helps maintain private volumes by: 
Scheduling a disk or tape device for private use 

• Training users to use the equipment properly (loading volumes, starting the drive, using the 
volume, and unloading it when the job Is done) 

Responding to REQUEST/REPLY commands In system environments where users are not 
allowed access to the equipment 
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OBJECTIVES 

To share limited disk resources among users and processes, a system manager should be able 
to: 

Describe the uses of public disk and tape volumes 
Manage volumes, including: 

— Prepare volumes for use 

— Obtain and modify volume infomriatlon 

— Use public volumes properly 

— Control the allocation of public volumes 

— Create a volume set 

— Maintain public and private volumes 

— Use the BACKUP utility to back up and restore information on volumes 
Use the VERIFY utility to check the validity of the file structure on a disk. 
Transfer files between the VMS system and PDP-11 systems. 
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RESOURCES 

To complete this module, you must have access to the following documents: 

1 . Guide to Maintaining a VMS System 

2. VMS DCL Dictionary 

3. Guide to Setting Up a VMS System 

4. VMS Exctiange Utility Manual 

5. VMS Backup Utility Manual 

6. VMS Bad Block Locator Utility Manual 

7. VMS Analyze/Disk_Structure Utility Manual 

8. VMS Mount Utility Manual 

To complete the Laboratory Exercises in this module, you must have access to at least one of 
the following: 

A blank tape volume and a tape device 

A blank disk volume and a corresponding disk device 

REFERENCES 

The following documents contain infomnation related to the material presented In this module: 

1 . VMS Installation and Operation Guide for your specific VAX processor 

2. Guide to VMS Files and Devices 

3. Guide to Using VMS Command Procedures 

4. VMS I/O User's Reference Manual: Part I 

5. VMS I/O User's Reference Manual: Part II 

6. RMS-11 User's Guide 
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PRIVATE DISK AND TAPE VOLUMES 

Owned by a single user or group of users 
Used to: 

— Preserve files 

— Transfer files 

— Provide a private storage environment to work in 

PUBLIC VOLUMES 

Normally owned by SYSTEM 

Provides storage space for system files and user files 

Accessible to all users on system 
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DCL COMMANDS FOR USING DISK AND TAPE 
VOLUMES 



Manage disk and tape volumes using DCL commands 

— ALLOCATE 

— DEALLOCATE 

— ANALYZE/MEDIA 

— ANALYZE/DISK_STRUCTURE 

— INITIALIZE 

— MOUNT 

— DISMOUNT 

— SET VOLUME 

— BACKUP 
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Figure 4-1 : Volume Manipulation Commands 
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Figure 4-2: Preparing and Using a Disl< or Tape Voiume 
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PERFORM DESIRED FILE MAINTENANCE 
OPERATIONS ON THE VOLUME. 

DISMOUNT THE VOLUME, 

CLOSING ACCESS TO ITS CONTENTS 

FROM YOUR PROCESS. 

DISMOUNTING UNLOADS YOUR VOLUME. 
YOU MUST REMOVE IT FROM THE DEVICE. 

DEALLOCATE THE DEVICE FROM YOUR 
PROCESS, MAKING IT AVAILABLE TO 
OTHER USERS OF YOUR SYSTEM. 
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PREPARING VOLUMES FOR USE 
Locating Bad Blocks 

Bad Block Locator utility (BAD) 

— Run on each new disl< (ANALYZE/MEDIA) 

Locates unreliable 6\sk areas (bad blocks) 

Records locations of bad blocks 

Allocates bad blocks to [0O0O0O]BADBLK.SYS 

— Not run on disks witli revectoring capability (DSA disks) 

— Not run on tapes 



Table 4-1: The BAD Utility 



Command 



Comment 



$ MOUNT /FOREIGN DBAl : 



$ ANALYZE/MEDIA/ COTPUT-BAD .LOG DBAl : 



$ ANALYZE/MEDIA/EXERCISE/LOG DBAl ! 



Tlie volume must be mounted with the /FOREIGN 
qualifier. 

You can produce an output listing of the bad 
blocks on the volume without affecting the 
information stored on the volume. 

The /EXERCISE qualifier causes read/write 
checks to be performed on the volume. All 
previously stored data Is destroyed. As it detects 
each bad block, the utility sends a message 
to the user because the /LOG qualifier was 
included. 
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Initializing and Mounting the Volume 

INITIALIZE defines volume parameters 

— Owner 

— Label 

— Protection code 

— Cluster size 

MOUNT Identifies volumes to system 

— Mal<es volumes available for processing 

— Enables 6\sk and tape operations 

Defining User Access to Volumes 

Operations limited by volume protection code 

— Default for disl^ volumes: <s:rwed, o:rwed, 6:rwed, h:rwed) 

— No default protection for tape volumes 

— Specify UIC and protection code for volume when initializing volume 

Users with VOLPRO privilege can gain access to any volume regardless of Its owner UIC 
and protection code. 
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Figure 4-3: User Access to Files on Disl( and Tape Volumes 
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Table 4-2: Summary of Effects of Access Rights to Files 



(R)ead 



(W)rite 



(E)xecute 



Disk Volumes 



Can read files on the 
volume 



Can modify files on 
the volume 



Can create files on 
the volume 



(D)elete 



Can delete files 
from volume 



(C)ontrolt 



Does not apply 



Disk Directories 



Can list files in direc- 
tory with or without 
using wildcards 



Disk Files 



Can read contents 
of file (Read access 
implies execute 
access) 



Can write to the di- 
rectory file (Requires 
READ access to cre- 
ate or remove files or 
do other (^rations 
that would change 
the directory) 



Can modify the 
contents of a file 



Can list files by 
name only (Can not 
use wildcards to list 
files) 



Can execute exe- 
cutable files 



Can delete the 
directory 



Can delete or 
rename the file 



Can change the 
characteristics of 
the directory (SET 
DIRECTORY) 



Can change the 
characteristics of the 
file. (SET FILE) 



Tape Volumes 



Can read list of files 
on tape 



Can add files on the 
volume (Write access 
implies read access) 



Does not apply 



Does not apply 



Does not apply 



tControl access does not appear in the protection mask for a file. It is never granted to the GROUP or WORLD 
categories of users; it is always granted to SYSTEM and OWNER users. 
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To establish protection during initialization process, one of tlie following must apply: 

— Volume must be blank (new) 

— You must own the volume 

— You have VOLPRO privilege 

Define volume protection with the INITIALIZE command: 

$ INITIALIZE [/qualifier, ] device-spec label 



Table 4-3: Defining Specific Volume Protection Codes During Initialization 



Qualifier 



Effects 



None 



Owner UIC for disk: none 



Owner UIC for tape: UIC of 
current user 

Protection on disl<: 

(S:RWED,0:RWED,G:RWED,W:RWED) 

Protection on tape: none 



/pROTECTioN=code Owner UIC: UIC of current user 

Protection: specified in code 



/OVJNER UIC=uic 



Owner UIC: UIC specified 
Protection: no effect on code 



Comments 



On disks, the owner UIC field is 
empty. 



The default protection code allows 
access to all users. 

System does not record a pro- 
tection code on tape unless you 
specify one. 

The code is in the same format 
as file protection codes. For 
tapes, only Read and Write access 
are meaningful. Also, System 
and Owner always have R and W 
access to a tape regardless of what 
is specified. For disks, E access 
allows create access. Unless you 
specify protection for tapes, all 
users have access. 

VMS compares the UIC of the 
process attempting access to the 
owner UIC and protection code of 
the volume. 
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Table 4-4: Establishing Predefined Volume Protection Codes During Initialization 



Qualifierf 



Effects 



Comments 



/NOSHARE 
/6R0DP/N0SHARE 
/GROUP 
/SYSTEM 



Owner UiC: UiC of current user 
Protection: (s:rwed,o:rwed,g,w) 

Owner UiC: [g.O]:^ 

Protection: (s:rwed,o:rwed,g:rwed,w) 

Owner UiC: [g.OJt 

Protection: (S:RWED,0:RWED,G:RWED,W:RWED) 

Owner UIC: [1,1] 

Protection: (S:rwed,o:rwed,g:rwed,w:rwed) 



Only system and owner 
iiave access 

Expands access to group 
members as well 

Expands access to all 
users 

Gives all users access, 
but only system users can 
create top-level directo- 
ries. Public volumes are 
typically mounted using 
the /SYSTEM qualifier so 
the manager can govern 
the use of disk space. 



fCan not combine qualifiers except as shown 
:|:g = group number of current user 
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To specify protection during mount process, one of tlie following must apply: 

— You own the volume 

— You have VOLPRO privilege 

Override established volume protection with the MOUNT command: 

$ MOUNT [/qualifier,...] device-spec IsJsel logical-name 



Table 4-5: Overriding Volume Protection Codes Established at Initialization 



Purpose 



MOUNT Com- 
mand 
Qualifier 



Effects/Required Privilege 



To override volume parameters as volume is mounted: 



Override owner UIC 
of tape or disk 



/OWNER OIC=uic 



Override disk protec- 
tion code 



/PROTECT ION=code 



Specified UIC Is owner while volume is 
mounted (does not modify UIC written on 
volume) 

Volume ownership or VOLPRO privilege 
required 

Specified code is protection code while vol- 
ume is mounted (does not modify protection 
code written on volume) 

Volume ownership or VOLPRO privilege 
required 
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Table 4-6: Qualifiers to the MOUNT Command Specifying User Access to a Volume 

Qualifier Comments 

Mou nt a disl< for private use 

none The user must own the volume or have VOLPRO privilege. 

If the user has VOLPRO privilege but does not own the volume or know the 
label, he or she must include the /OVERRIDE=IDENTIFICATION qualifier with 
the IVIOUNT command to access the volume. 

if a qualifier is not included in the MOUNT command to allow access to other 
users, only the owner can access the volume while It is mounted regardless of 
the protection code. 

Mal<e a disl< accessible to your group 

/GROUP if the volume was Initialized as a GROUP volume to set the protection code, but 

is not mounted /GROUP, group users can not access It. 

Assigns logical name in group table (GRPNAM privilege required). 

Group members can gain access to the volume without mounting It because 
name is in group logical name table. 

Group members must still pass the volume protection code. 

Mal^e disk accessible to all users on the system 

/SYSTEM If the volume was initialized as a SYSTEM volume to set the protection code, 

but is not mounted /SYSTEM, users can not access it. 

Assigns logical name in system table (SYSNAM privilege required). 

Ail users can gain access to the volume without mounting it. 

Users must still pass the volume protection code. 

Example 4-2 uses the /SYSTEM qualifier. 

iVIake disk available to all users on condition 

/SHARE Other users must issue a MOUNT/SHARE command. 

Other users must still pass the volume protection code. 
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OBTAINING AND MODIFYING VOLUME INFORMATION 



List characteristics of a volume 

$ SHOW DEVICE/FULL 

Modify characteristics of a volume 

$ SET VOLDME 



Table 4-7: Obtaining and Modifying Volume Information 



Operation 



Command/Example 



Comments 



Displaying the char- 
acteristics of the 
volume 

Modifying the char- 
acteristics of the 
volume 



$ SHOW DEVICE/FOLL device 
$ SHOW DEVICE/FULL MYDISK 



Displays the characteristics 
of the volume currently 
mounted on the device. 



$ SET VOLOME/qualif ier volume-name 
$ SET VOLUME/LABEL=MAyiOBCK MYDISK 



Requires VOLPRO privilege 
or volume ownership to 
change the characteristics 



Example 4-1 : The SHOW DEVICE/FULL Command 

$ SHOW DEVICE/FULL DRA2 

Disk DRA2:, device type RM03, is online, allocated, deallocate on dismount, 
mounted, error logging enabled. 



Error count 
Owner process 
Owner process ID 
Reference count 

Volume label 
Cluster size 
Free blocks 
Extend quantity 
Mount status 




"BIERLY" 
00000094 

2 

"USER_DISK" 

3 

131589 

5 

Process 



Operations completed 250 

Owner OIC [11,340] 

Dev Prot S:RWED,0:RHED,G:RWED,W:RWED 
Default buffer size 512 



File ID cache size 64 
Quota cache size 

Write-thru caching enabled 



Relative volume no. 
Transaction count 
Maximum files allowed 
Mount count 
Cache name " 

Extent cache size 





1 

16460 

1 

_DRAO:XQPCACHE" 

64 



Volume is subject to mount verification, file high-water marking. 
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CREATING A PUBLIC VOLUME 

Initializing a disk witli the /SYSTEM qualifier 

— Sets owner UIC to [1 ,1 ] 

— Sets volume protection to: (s:rhed, o:rwed, 6:rwed, wsrweo) 
Mounting a disk with the /SYSTEM qualifier 

— Deallocates the device 

— Places logical name specified in system logical name table 

— Allows all users to access volume 

Example 4-2: Initializing and Mounting a Public Disk 

$ SHOW DEVICE DRA2 

Device Device Error Volume Free Trans Mnt 

Name Status Count Label Blocks Count Cnt 

DRA2 : Online 

$ 

$ ALLOCATE DRA2 POBDISK 
%DCL-I-ALLOC, _DRA2: allocated 
$ MOUNT/FOREIGN PUBDISK 

%MOONT-I-MOUNTED, USER DISK mounted on _DRA2 : 
$ ANALYZE/MEDIA/EXERCISE POBDISK 
$ DISMOUNT/NOUNLOAD PUBDISK 
$ INITIALIZE/SYSTEM PUBDISK MSfVOL 
$ MOUNT/SYSTEM POBDISK MYVOL 

%MOONT-I-MOONTED, MYVOL mounted on _DRA2: 
$ SHOW LOGICAL/SYSTEM D* 

(LNM$SYSTEM_TABLE) 

"DBGSINPUT" = "SYS$INPOT:" 
"DBG$OUTPOT" = "SYS$OOTPUT:" 
"DDP$DIS" = "SYS$MflNAGERiDDP.DIS" 
"DISK$MYVOL" = "DRA2:" 
"DISK$VAXVMSRL3" = "DRAO:" 
"DTR$LIBRARY" = "SYSSSYSROOT : [DTR] " 



Managing Disk and Tape Volumes 4-19 



Table 4-8: Commands for Creating and Accessing Private Disk and Tape Volumes 



Command/Example 
Allocating a device 



$ ALLOCATE device [logical-name] 
$ ALLOCATE DU DISK 



Comments 



Finds the first available disl< drive of type DU and 
allocates it to your process. Tiie system places the 
logical name DISK in your process logical name table, 
equating it to the name of the allocated device. Other 
users can not gain access to this device. Since you 
used the ALLOCATE command, you must use the 
DEALLOCATE command when you are done to make 
the device available to other users. 



Finding unreliable areas on an unused disk 



S MOOMT/FOREIGN device 

$ ANALYZE/MEDIA/EXERCISE device 



$ DISMOUNT/NOONLOAD device 



Finds unreliable areas of the disk and records their 
locations in a special block. The process destroys all 
previous data on the disk. If the disk is not your own, 
VOLPRO privilege is required. 

Since the volume is mounted as a foreign volume, you 
must dismount it so you can initialize it as a Files-11 
volume. 



Creating a file structure on a tape or disk 



$ INITIALIZE device label 
$ INITIALIZE DUA2: TESTDISK 



$ INITIALIZE MUAO: TSTTAP 



Builds Fiies-11 On-Disk Structure on the volume 
loaded on the DUA2: device. The volume is labeled 
TESTDISK. You are declared owner of the disk; all 
user groups are allowed all types of access (RWED). 
You must own the disk, or possess VOLPRO privilege 
to initialize it. 

Builds current ANSI level tape structure on the volume 
located on device MUAO. The volume receives the 
label TSTTAP. By default, you are declared the owner; 
all user groups are allowed ail types of access (RWED). 



Creating a link between the volume and your process 



$ MOUNT device label [logical-name] 



S MOUNT DUA2: TESTDISK DISK 



The system allocates the device to your process until 
you issue the DISMOUNT command. 

Mounts TESTDISK on the device DUA2. The logical 
name DISK is assigned the equivalence name DUA2. 
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Table 4-9: Commands for Removing Private Disic and Tape Volumes 

Com mand/Example Comments 

Breakin g the link between the volume and your process 

$ DisMODNT [/NooNLOAD] device If you want VMS to keep the volume on-line when you 

dismount it, use the qualifier /NOUNLOAD. 

The DISMOUNT command does not deallocate a device 
that you have albcated with the ALLOCATE command. 

s DISMOUNT DUA2 : Dlsmounts and automatically unloads the volume on DUA2. 

Deletes the logical name DISK assigned by the MOUNT 
command. 

Deallocating a device ^^ 

S DEALLOCATE device 

$ DEALLOCATE D0A2 : Deallocates device DUA2. Frees the device for use by 

other users. Does not delete a logical name assigned by 
the ALLOCATE command. 
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Defining Space Allocation on Public Volumes 



Table 4-10: INITIALIZE Command Qualifiers that Affect Space Allocation 
Qualifier Comment ' 



/cLosTERsizE=n The minimum number of contiguous blocks to be allocated to each file. 

/EXTENsioN=n The number of blocks to give to a file when It is extended. 

/MAxiMOMFiLEs The maxImum number of files the disk volume can contain (once set, 

can only be changed by reinitializing the volume). 

/DENSITY The density (800, 1 600 or 6250 bits/in) at which a tape is to be written. 
If writing RX02 floppies, density is SINGLE or DOUBLE. 
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ALLOCATION OF DEVICES 



System manager decides which devices hold private volumes and which hold public 
volumes 



Private Volumes 

One or more drives set aside for private volumes 
When using a drive for more than one private volume: 

— Run BAD utility on each volume while volume is in drive before initializing it. 

— Periodically align and check drive for malfunctions 

— Load/unload all volumes properly 

— Back up volume before removing it from the drive (when practical) 



Public Volumes 

Can contain system and user software 

Can provide space for user files 

Allocate space on volume using the SYSMAN utility 

— Strive to keep system disk less than three-quarters full for maximum performance 

— When obtaining optional software, check to see how many blocks of disk space it 
requires (Some configurations, due to lack of disk space, can not support all optional 
products desired.) 

Maintain security of system files by using protection codes and access control lists 
judiciously 
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Creating Volume Sets 



Create when database or user directories are too large for one volume 

— Consists of one or more disk volumes 

— System treats as one large volume 

— VMS stores files on any volume in the set with available space, attempting to use 
space evenly over all volumes in the set 

— Create from new or existing volumes 
To create volume sets 

— Allocate the necessary devices 

— Physically load the volumes 

— Initialize each new volume 

— Use the MOUNT/BIND command to create volume set from Initialized volumes 
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Example 4-3: Creating a Volume Set from an Existing Voiume 

$ ALLOCATE DRA2 DEVI 

%DCL-I-ALLOC, _DRA2: allocated 

$ ALLOCATE DRA3 DEV2 

%DCL-I-ALLOC, _DRA3: allocated 

$ INITIALIZE/SYSTEM DEV2 USER2 

$ MOUNT/SYSTEM/BIND=DSER_SET DEV1,DEV2 USER1,DSER2 

%MOUNT-I-MOUNTED, DSERl mounted on _DRA2: 

%MOUNT-I-MOUNTED, 0SER2 mounted on _DRA3: 

$ SHOW LOGICAL /SYSTEM D* 

(LNM$ SYSTEM_TABLE ) 

"DBG$INPUT" = "SYS$INPOT:" 

"DBG$OOTPOT" = "SYS$OUTPOT:" 

"DDP$DIS" = "SYS$MANAGER:DDP.DIS" 

"DISKSOSERl" = "DRA2:" 

"DISK$USER2" = "DRA3:" 

"DISK$OSER_SET" = "DRA2 : " 

"DISK$VAXVMSRL3" = "DRAO : " 

"DTR$LIBRARY" = "SYS$SYSROOT : [DTR] " 
$ 

S COPY WORKl : [ BROWN ] EXAMP5 . COM 
_To! DISK$DSER_SET: [SMITH] EXAMP5.COM 
$ DIRECTORY DISK$OSER_SET: [SMITH] 

Directory DISK$OSER_SET: [SMITH] 

EXAMP5.C0M;1 

Total of 1 file. 

$ DISMOUNT DEVI 

$ SHOW LOGICAL/SYSTEM D* 

(LNM$SYSTEM_TABLE ) 

"DBG$INPUT" = "SYS$INPOT:" 
"DBG$OUTPUT" = "SYS$OUTPOT:" 
"DDP$DIS" = "SYS$MANAGER:DDP.DIS" 
"DISK$VAXVMSRL3" = "DRAO:" 
"DTR$LIBRARY" = "SYS$SYSROOT : [DTR] " 
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MAINTAINING PRIVATE AND PUBLIC VOLUMES 

Regular maintenance improves performance 

— Back up public disks 

— Look for lost files 

• Use MOUNT/OVERRIDE command to mount volume with unknown label (need VOLPRO 
privilege unless you own the volume) 

Example 4-4: Mounting a Disk with an Unknown Label 

$ MOONT/OVERRIDE=IDENTIFICATION DRA2 UNKNOWN MYDISK 
%M00NT-I-MOUNTED, PROGRRM_DISK mounted on _DRA2: 
$ SHOW DEVICE/FULL MYDISK 

Disk DRA2:, device type RU03, is online, allocated, deallocate on dismount, 
mounted, error logging enabled. 

Error count 6 Operations conpleted 2643 

Owner process "BIERLY" Owner OIC [11,340] 

Owner process ID 00000094 Dev Prot S:RWED,0:RWED, GrRWED, W;RMED 

Reference count 2 Default buffer size 512 

Volume label "PROGRAM_DISK" 
Cluster size 3 

Free blocks 131589 

Extend quantity 5 

Mount status Process 

File ID cache size 64 
Quota cache size 

Write-thru caching enabled 

Volume is subject to mount verification, file high-water marking. 

$ DISMOUNT MYDISK 
$ 



Relative volume no. 







Transaction count 




1 


Maximum files allowed 




16460 


Mount count 




1 


Cache name "_ 


DRAG 


:XQP CACHE" 


Extent cache size 




64 
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On-Line BACKUP 

Use on-line BACKUP from any temninal where you are logged in 
• Use on-line BACKUP commands to save: 

— Individual files and their locations in a directory structure 

— A directory structure and the files in it 

— All directory structures and files on a volume 
To back up an entire volume, first mount it privately 

Normally, do not use on-line BACKUP to bacl< up system volume 

— Use standalone BACKUP to back up system volume 
BACKUP command line stmcture: 

$ BACKUP [/qualifier ] input-specifier output-specifier 
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Table 4-1 1 : BACKUP Terms 



Term 



Save set 



Save-set-name 



Save-set-specifier 



Input-specifier 



Output-specifier 



Definition 



Comments/Examples 



A file in BACKUP format, created by 
the BACKUP utility. 

Any legal VMS filename, file typet, 
and version number. 

A device name and a save- set-name. 
The format is device:save-set-name. 

The input file specification (what 
you are saving) or save-set-specifier 
(what you are restoring from) in the 
BACKUP command. 



The output save-set-specifier (where 
you are saving to) or file specification 
(where you are restoring to) in the 
BACKUP command. 



The utility can create save 
sets on tape or disk vol- 
umes.! 

SAVE.BCK;2 

MDaO:SAVE.BCK;2 

$ BACKUP - 

_$ [BR0MN1FILE.DAT- 

_$ output- specifier 

$ BACKUP - 

_$ MUAO : SAVE . BCK; 2 - 

$ output-specifier 

$ BACKUP - 

_$ input-specifier - 

_$ MUAO: SAVE. BCK 

$ BACKUP - 

_S input-specifier - 
$ DBAl: [BROWN] 



t If you are creating or using a save set on a disk volume, you must follow the name of the save set with the 
/SAVE_SET qualifier. 

t There is no default file type. However, the .BCK file type is used by convention. The examples in this module 
use the file type .BCK. 
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BACKUP Qualifiers 

Five types of qualifiers 

— Command qualifiers 

— Input file-selection qualifiers 

— Input save-set qualifiers 

— Output file qualifiers 

— Output save-set qualifiers 

Some qualifiers exist in more than one qualifier-type category 

Table 4-12: BACKUP Qualifier Types 



Qualifier Type 



Command qualifier 



Input file-selection qualifier 
Input save-set qualifier 



Ouput file qualifier 
Output save-set qualifier 



Description 



Modifies the default action of a BACKUP command. 
You can place this type of qualifier anywhere on the 
command line. The qualifier acts upon every file in the 
input or output specifier. (See Table 4-13) 

Selects files from the input specifier. Place immediately 
after the input specifier. (See Table 4^15) 

Affects the way BACKUP handles an input save set 
during a restore operation. Place immediately after the 
input specifier. (See Table 4-16) 

Changes the way output files are restored. Place them 
immediately after the ouput specifier. (See Table 4-17) 

Affects the way BACKUP processes an output save set 
during a save operation. Place immediately after the 
output specifier. (See Table 4-1 8) 
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Table 4-13: BACKUP Command Qualifiers 



Qualifier 



Description 



/[NO] ASSIST 

/BRIEF 

/BUFFER_COUNT=n 

/COMPARE 

/DELETE 

/FAST 

/FULL 

/IGNORE=option 

/IMAGE 

/INCREMENTAL 
/ [NO] INITIALIZE 
/INTERCHANGE 

/JOORNAL [-file-spec] 

/LIST[=file-speG] 
/[NO] LOG 
/PHYSICAL 

/RECORD 

/[NO] TRUNCATE 

/VERIFY 

/VOLOME=n 



Allows operator or user intervention if a request to mount a magnetic tape fails during a 
BACKUP process. 

Used with /LIST to produce an abbreviated listing of files in the save set. 

Specifies the number of I/O buflfers to be used in the BACKUP operation. 

Compares the save set, device, file, or files specified by the input specifier with the save 
set, device, file, or files specified by the output specifier and displays an error message if 
it finds a difference. Can be used with the qualifiers /IMAGE and /PHYSICAL. 

Specifies that a BACKUP save or copy operation is to delete the selected input files from 
tlie input volume after ^ files have been processed. 

Processes the input specifier using a fast file scan to reduce processing time. The input 
specifier must be a Files- 11 disk. 

Lists the file infoimation produced by the command qualifier /LIST in the format provided 
by the DCL command DIRECTGRY/FULL. 

Specifies that a BACKUP save or copy operation is to override certam restrictions. See 
Table 4-14 for list of options. 

Directs BACKUP to process an entire volume or volume set (all flJIes). 

Allows you to restore an incremental save set. 

Initializes an output disk volume, destroying all previous contents. 

Directs BACKUP to process files in a manner suitable for data interchange with utilities 
and systems that are incompatible with the standard BACKUP format. 

Specifies that a BACKUP save operation is to create a BACKUP joumal file, or append 
information to an existing BACKUP joumal file. 

Lists information about a BACKUP save set and its contents. 

Directs BACKUP to display the file spec of each file processed. 

Directs BACKUP to ignore any file structure on the input volume and to process the 
volume in terms of logical blocks. 

Dkects BACKUP to write the current date and time in the BACKUP date field of each 
file header record once a file is successfully saved or copied. 

Controls whether a copy or restore operation tnmcates a sequential output file at the 
end-of-file (EOF) when restoring it. 

Specifies that the contents of the output specifier be compared with the contents of the 
input specifier after a save, restore, or copy operation is completed. 

Indicates that a specific disk volume in a disk volume set is to be processed. (Only valid 
with the /IMAGE qualifier.) 
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Table 4-14: BACKUP /IGNORE Qualifier Options 



Option 



Description 



INTERLOCK 



Processes files that othierwise could not be processed because of file 
access conflicts. This option can be used to save or copy files currently 
open for writing, such as when doing a backup save operation on a 
disl< actively being used. Note that no synchronization is made with the 
process writing the file, so the file data that is copied to the output specifier 
might be inconsistent with the input file, depending on the circumstances. 
When a file open for writing is processed, BACKUP issues the message: 



LABEL PROCESSING 



NOBACKOP 



%BACKOP-W-ACCONFLICT, "filename" is open for write by another user 

The INTERLOCK option is especially useful if you have files that are open 
so much of the time that they might not otherwise be saved. The use of 
this option requires the SYSPRV privilege, a system UIC, or ownership 
of the volume. 

Saves or copies the contents of files to the specified magnetic tape 
volume regardless of the information contained in the volume header 
record. BACKUP will not verify the volume label or expiration date before 
writing information to the tape volume. 

Causes BACKUP to save files marl<ed with the NOBACKUP flag by 
the DCL command SET FILE/NOBACKUP. If you do not specify this 
option, BACKUP saves only the file header record of files marked with 
the NOBACKUP flag. 
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Table 4-15: BACKUP Input File-Selection Qualifiers 



Qualifier 



/BACKUP 

/BEFORE=date 
/BY_OWNER=uiG 
/CONFIRM 
/CREATEof 

/EXCLUDE= (file-spec, . . . ) 
/EXP IREOt 

/MODIFIEDt 
/SINCE=date 



Description 



Selects files according to tiie BACKUP date written in the file 
lieader record by tiie BACKUP/RECORD command. 

Selects files dated earlier tiian thie specified date and time. 

Selects files for processing according to tiie specified UIC. 

Prompts for confirmation to process tiie input file. 

Selects files according to tiie value of tiie creation date field in 

eacii file iieader record. 

Do not process files tliat otiierwise meet tiie selection criteria. 

Selects files according to tiie value of tiie expiration date field 
In eacii file iieader record. 

Selects files according to tiie value of tiie modified date field in 
eacii file iieader record. 

Selects files dated equal to, or later tiian, tiie specified date 
and time. 



tMust also specify either the /BEFORE or /SINCE qualifiers. 



Table 4-16: BACKUP Input Save Set Qualifiers 



Qualifier 



/[NO]CRC 



/[NO] REWIND 



/SAVE SET 



/SELECT= (file-spec, . . . ) 



Description 



Specifies tiiat tiie software Cyclic Redundancy Ciiecl^ (CRC) is 
to be performed. 

Rewinds tiie input tape reel to the beglnning-of-tape (BOT) 
mari<er before reading the input volume. 

Directs BACKUP to treat the Input file as a BACKUP save set 
and not as an input file to be saved. 

Selects the specified files for processing. 
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Table 4-17: BACKUP Output File Qualifiers 



Qualifier 



Description 



/BY_OWNER [=option] 



Redefines the owner UIC for restored files. Options include: 

Default — Sets the owner UIC to the user's current default UIC. 

Original — Retains the owner UIC of the file being restored. 

Parent — Sets the owner UIC to the owner UIC of the directory to 
which the file is being restored or copied. 

[uic] — Sets the owner UIC to the UIC specified. 

Creates a new version of a file if a file with an identical specification 
already exists at the output location. 

Writes the input file over a file with an identical specification at the 
output location. 

Replaces a file on the output specifier with an identically named file 
from the input specifier. 

tif you do not specify /NEWVERSION, /OVERLAY, or /REPLACE, and the version number of tlie file l)eing 
testoied is identical to that of an existing file, BACKUP reports an etror and does not restore the file. 



/NEW_VERSIONt 
/OVERLAYf 
/REP LACE t 
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Table 4-18: BACKUP Output Save Set Qualifiers 



Qualifier 



Description 



/BLOCK_SIZE=n 

/BY_OWNER=uic 
/COMMENT=string 
/ [NO] CRC 

/DENSITY=n 

/GROUP_SIZE=n 

/LABEL= (string [ , . . . ] ) 

/OWNER_OIC=uio 
/PROTBCTION=code 
/[NO] REWIND 



/SAVE SET 



/TAPE_EXPIRATION [=ciate] 



Specifies tlie output block size in bytes for data records In a 
BACKUP save set. 

Specifies the owner UIC of the save set. 

Places a comment of up to 1024 characters in an output save set. 

Specifies that the software Cyclic Redundancy Checl< (CRC) is to 
be computed and stored in the data blocl<s of the output save set. 

Specifies the recording density of the output magnetic tape. Note 
that /REWIND is required with this qualifier. 

Defines the number of blocks BACKUP places In each redundancy 
group. 

Specifies the one- to six-character volume labels for magnetic 
tapes to which the save set is written. 

Specifies the owner UIC of the save set. 

Specifies the protection to be applied to the save set. 

Rewinds the output tape to the beginning-of-tape (BOT) marker 
and Initializes the output tape. Specifying /NOREWiND causes 
the tape to wind fonward to the logical end-of-tape (EOT) and to 
begin writing the save set there. 

Directs BACKUP to treat the output file as a BACKUP save set 
(on disk). 

Writes the date on which the tape will expire to the volume header 
record. /REWIND must also be specified with this qualifier. 
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Table 4-19: Saving Files and Directories with On-Line BACKUP 



Example 



Comments 



S BACKUP [BROWN] FILE. DAT 
$ MUAO:SAVE.BCK 



$ BACKUP [BROWN] *.*;*, - 
_$ [ SMI TH ] PR6M . FOR - 
_$ MUAO : SAVEALL . BCK 

S BACKUP (BROWN] FILE. DAT - 
$ DRAl: [ARCHIVE] BROWN. BCK/ SAVE SET 



You must Include the name of a save set as 
either the input-specifier or the output-specifier. 

To create a save set on a tape volume, mount the 
volume with the MOUNT/FOREIGN command 
first, so the BACKUP utility can forniat the tape. 

You can save several files by including wildcards 
and/or listing the names (separated by commas). 
However, you can only specify one save set in 
the output-specifier. 

include the /SAVE_SET qualifier after the save- 
set-name if the save set is on a disk volume. You 
can create save sets on any disk volume where 
you can create other files. You do not have to 
mount the volume as a foreign volume first. 
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List contents of a save set using the BACKUP utility. 

$ BACKUP/LIST device-spec: save-set-name 

Example 4-5: Listing the Contents of a Save Set 

$ ALLOCATE MUAO 

%DCL-I-ALLOC, _MaAO: allocated 

$ MOUNT/OVERRIDE=ID MUAO 

%MOUNT- I -MOUNTED, SAVE mounted on _MUAO! 

$ DIRECTORY MUAO: 

Directory MUAO : [ ] 

SAVE.BCK;! 

Total of 1 file. 

$DISM0UNT/NO0NLOAD MUAO 

$ MOUNT/FOREIGN MUAO 

%MOUNT-I-MOUNTED, SAVE mounted on _MUAO: 

$ BACKUP/LIST MU AO : SAVE . BCK 

Listing of save set 

Save set: SAVE.BCK 

Written by: BROWN 

UIC: [011,340] 

Date: 4-JUL-1984 11:18:59.32 

Command: BACKUP WORKl: [BROWN] *.*;* MUAO : SAVE . BCK 

Operating System: VAX/VMS version X2M9 

BACKUP version: V4.0 

CPU ID register: 0138700D 

Node Name : _SUPER : ; 

Written on: _MUA0: 

Block size: 8192 

Group size; 10 

Buffer count : 3 

[BROWN] A. LOG; 6 3 15-N0V-1983 11:43 

[BROWNJFILE.DAT; 1 1 17-OCT-1983 13:02 

[BROWN] PILE. DAT; 2 1 17-OCT-1983 14:00 

[BROWN] JUNK. DAT; 9 1 28-JUL-1983 09:00 

[BROWN] MEMO. DAT; 2 2 4-FEB-1984 10:49 

Total of 5 files, 8 blocks 
End of save set 

$ DISMOUNT MUAO 
$ DEALLOCATE MUAO: 
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When restoring save sets, enter the directory name (in acceptable format) as the output-specifier. 



Table 4-20: Output-Specifier Formats Used to Restore Save Sets with On-Llne BACKUP 



Output-Specifier 
Format/Examplet 



Comments 



S BACKUP MO AO : SAVE . BCK 
$ DRAl :[*...] 



$ SHOW DEFAULT 

DRAl: [SMITH] 

$ BACKUP MUAO : SAVE . BCK [ . 

[directory. . . ] 

$ BACKUP MUAO : SAVE . BCK - 
S DRAl: [JONES. . .] 



[directory] 



$ BACKUP MUAO : SAVE . BCK 
S DRAl: [JONES] 



[ ] orno directory 



$ SHOW DEFAULT 

DRAl: [SMITH] 

S BACKUP MUAO : SAVE . BCK I ] 

$ BACKUP MUAO : SAVE . BCK * . * 



Restores the directory structure and files in the save set to 
the output volume in their original form. 

Restores the files in the save set to DRA1 :[BROWN] and 
DRA1 :[BROWN.FILES], respectively. If these directories do 
not exist on the volume In DRA1 , the BACKUP utility creates 
them. 

Restores the files in the save set to the current default 
directory and subdirectories of the current default directory. 

Restores the files from the [BROWN] directory to 
DRA1:[SMITH]. Restores the flies from [BROWN.FILES] 
.] to [SMITH.FILES]. The utility creates subdirectories as 

needed. 

Restores the files in the save set to the named directory and 
subdirectories of the named directory. 

Restores the files from the [BROWN] directory to 
DRA1 :[JONES]. Restores the files from [BROWN.FILES] 
directory to [JONES.FILES]. The utility creates the [JONES] 
and [JONES.FILES] directories if they do not exist. 

Restores the files in the save set to the named directory. 
If the save set contains files within subdirectories, the 
subdirectories are not created; instead, all files In all 
subdirectories will be restored to the single named directory. 

Restores the files from the save set to the [JONES] directory. 
All files In the directory and its subdirectories in the save 
set are restored as well. The utility does not create any 
subdirectories. 

Restores the files In the save set to the current default 
directory. 

Either command restores all the files in the save set to 
the DRA1:[SMITH] directory. The utility does not create 
subdirectories. 



tYou are restricted to these formats when you restore save sef For ;il! examples in this table, the save set contains 
the directory [BROWN], the subdirectory [BROWN.HLES], and several files in each. 
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Example 4-6: Restoring Specific Files from a Save Set 

S ALLOCATE MUAO 

%DCL-I-ALLOC, _MUAO: allocated 

$ INITIALIZE MUAO BROWN 

S MOUNT/FOREIGN MUAO 

%MOUNT-I-MOUNTED, BROWN mounted on _MUAO: 

$ SET DEFAULT DRAl: [BROWN] 

$ BACKUP *.*;* MUAO: BROWN. BCK 

$ BACKUF/REWIND/LIST MUAO: BROWN. BCK 

Listing of save set 



BRO?W.BCK 
BIERLY 
[011,340] 

4-JUL-1984 11:08:51.55 
BACKUP *.*;* MUAO: BROWN. BCK 
VAX/VMS version X2M9 
V4.0 
0138700D 
_SUPER:: 
_MUA0: 
8192 
10 
3 



Save set : 
Written by: 
UIC: 
Date: 
Command : 

Operating system: 
BACKUP version: 
CPU ID register: 
Node name : 
Written on; 
Block size: 
Group size: 
Buffer count: 

[BROWN] EXAMP5 . COM; 2 
[BROWN] EXAMPS . COM; 1 
[BROWN] EXAMP5 . DAT; 4 
[BROWN] EXAMP5 .DAT;3 
[BROWN] EXAMP5 .DAT; 2 
[BROWN] EXAMP5 .DAT; 1 
[ BROWN ] MAIL . MAI ; 1 

Total of 7 files, 47 blocks 
End of save set 

S DIRECTORY DRA2: [SMITH] 

%DIRECT-W-NOFILES, no files found 

$ BACKUP/REWIND MUAO : BROWN. BCK/ SELECT=>EXAMP 5 .COM DRA2: [SMITH] 

$ DIR DRA2: [SMITH] 

Directory DRA2: [SMITH] 

EXAMP5.COM;2 EXAMP5.C0M;1 

Total of 2 files. 
$ 



1 17-NOV-1983 14:19 

1 17-NOV-1983 14:18 

4 17-NOV-1983 14:24 

4 17-HOV-1983 14:23 

4 17-NOV-1983 14:19 

4 17-N0V-1983 14:19 

29 28-MAY-1984 17:06 
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Improve performance of volume witfi image backup. 



Table 4-21 : Image Backups 



Command/Example 



Comments 



Save a disk volume to a save set on tape 



$ BACKUP/ IMAGE device-name - 
_$ save-set-specifier 

$ BACKUP/ IMAGE DBAl: - 
_$MOA0:MAR24.BCK 

$ BACKUP/ IMAGE/RECORD DBAl : 
$MUAO:FULL.BCK 



Create a save set on tape so you can restore data If 
failures occur, or so you can temporarily store data 
on a less expensive medium. (Tape volumes must 
be mounted witii the /FOREIGN qualifier first.) 

The /RECORD qualifier causes the utility to record 
the current date and time in the backup field of the 
file header of every file on DBAl as it saves them. 
The BACKUP utility checks this field when it does 
an incremental backup (see Table 4-22). 



Restore a disk volume from an ima ge save set 

$ BACKUP/ IMAGE save-set-specifier - 
$ device-name 



S BACKUP /IMAGE MUAO :MAR24 .BCK 
$ DBAl : 



Restore a save set after a failure occurs and the 
data on the original disk volume is destroyed, or 
move data from temporary storage back to a disk 
volume. 

Copy the contents of the MUA0:MAR24.BCK 
save set to the disk volume, DBA1 . Since you 
include the /IMAGE qualifier, BACKUP creates the 
directories and subdirectories named in the save 
set to duplicate the original volume on the output 
volume. 



Copy a disk volume to another disk and create a more efficient volume 



$ BACKUP/ IMAGE input-device - 
_$ output -device 

$ BACKUP /IMAGE DBAl: DBA2 : 



Make a copy of the volume loaded in the input 
device to the volume loaded in the output device. 

Copy the contents of the volume in device DBA1 
to the volume in device DBA2. In the new volume, 
the files are made contiguous, making I/O more 

efficient. 
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Perform incremental backups in between full image bacl<ups. 



Table 4-22: Incremental Backup and Restore 



Command/Example 



$ BACKUP /RECORD - 
_$ DRAl :[*...] /SINCE=BACKOP 
$ MUA0:JON19F 



Incremental Backup 

$ BACKUP /RECORD - 
_$ device -name /SINCE=BACKUP 
$ save-set-specifier 



Comments 



Back up those files that were created or modified since 
the last save operation. BACKUP finds out whether a 
file was created or modified since the last backup by 
comparing the backup field in the file header with the 
modified field. The /RECORD qualifier causes the utility 
to write the current date and time to the file header of 
each file it saves. 

Copies all files in all directories on the DRA1 volume 
which were created or done with the /RECORD qualifier. 
Files are copied to the save set iy^UA0:JUN19F. Note 
that you must mount the volume with the /FOREIGN 
qualifier before entering this command. 



Incremental Restore 



$ BACKUP /INCREMENTAL - 
_$ save-set-specifier 
_$ out.put-device/BY_OWNER=ORIGINAIi 



$ BACKUP /IMAGE - 

_$ MUAO : WEDFULL . BCK - 

_$ DRAl : 

$ BACKUP/ INCREMENTAL - 

_$ MUAO :FR I INC. BCK - 

_$ DRAl :[*...] /BY_OWNER=ORIGINAL 

$BACKUP/ INCREMENTAL - 
_$ MUAO rTHUINC. BCK - 
$ DRAl :[*...] /BY OWNER=ORIGINAL 



Restore incremental backup save sets in reverse order 
(that is, restore the save set made on Friday, then 
Thursday's, then Wednesday's, etc.) after you restore 
the most recent full image save set. Include the 
/INCREMENTAL qualifier when restoring incremental 
save sets to enable the utility to restore the files 
correctly Include the /BY_OWNER=ORIGINAL qualifier 
to ensure that each file is given the UIC of its original 
owner, rather than the UIC of the process entering the 
BACKUP command. 

Restores the full image backup done on Wednesday to 
the device DRAL The incremental save sets update the 
volume until it is in the same state it was in at the time 
of the last incremental backup (done on Friday). 
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Operator Action During Multlvolume Disk or Tape Set Backups 

VMS automatically intervenes to create multlvolume set 
Operator receiving request to load next volume in set should: 

— Unload current volume 

— Load next volume 

— Respond to request with REPLY/INITIALIZE or REPLY/BLANK_TAPE command 
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Figure 4-4: Output Media Used for Bacl(ups 



OPERATION/COMMAND 



COMMENTS 



Backup Disk to Disk - 

$ BACKUP/IMAGE DBA1 DBA2 





DRIVE . out 



ORiVC ■ OIAX 



Copy all of the information from tfie 
input disk to the output disk. If the 
output disk is large enough to hold all 
of the information from the input disk, 
you can store the input disk and use the 
output disk. Performance improves be- 
cause the information on the output 
disk is compressed and Is faster to 
access. Note that if the input disk 
was bootable, the output disk will also 
be bootable. 



Backup Disk to Tape - 

BACKUP/IMAGE DBA1 MUAO:FULL.BCK/ 
SAVE SET 




•Q 



BKIVlaHTM 



Copy all of the information from the disk 
to a save set on the tape. To improve 
performance, load a scratch disk and 
restore the information to It from the 
tape. Then use the newly created disk 
and store the previous one. 



Backup Disk to Multiple Disks - 

$ BACKUP/IMAGE DBA1: - 
_$ DRA2:SAVE.BCK 




DHIVIaOIAI 



Create a save set on the output volumes. 
When the first output volume is full, the 
system notifies the operator by sending 
a message to the operator console. The 
operator removes the volume and loads 
the next one. The operator is prompted 
to load each successive volume until 
the backup is complete. Improve perform- 
ance with the same method used in disk 
to tape backups (see previous section 
of figure). These output disks are called 
a multlvolume disk set. To restore them, 
you must begin with the first volume. 



Dnivi - »«M 



Backup Disk to Multiple Tapes 

$ BACKUP/IMAGE DBA1: - 
$ MUAO:SAVE.BCK 




DOIVI . Btat 



•Q 

BUMS . wT>e 

•Q 

OHIWi-MTM 

■Q 



Create a save sot. When the first volume 
is full, the system notifies the operator 
to load the next volume. This continues 
until the backup is complete. Improve 
performance using the same method de- 
scribed for disk to tape backups (See 
previous section of figure). The output 
tapes are called a multivolume tape set. 
To restore them, you must begin with 
the first volume. 



TT6 X0971 BBA 
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Error count 





Owner process 


" TTAl:" 


Owner process ID 


0000009D 


Reference count 


1 


Volvune label 


"BACKUPl" 


Record size 





Mount status 


Process 


ACP process name 


"MUAOCACP" 


Density 


1600 



Example 4-7: Creating a Multlvolume Tape Set on One Drive 

$ ALLOCATE MT: TAPE 

%DCL-I-ALLOC, _MUAO: allocated 

$ INITIALIZE TAPE BACKDPl 

$ MOUNT TAPE BACKUP 1 

%MOONT- I -MOUNTED, BACKUPl mounted on _MUAO: 

$ SHOW DEVICE/FULL TAPE 

Magtape MUAO : , device type TK50, is online, allocated, mounted, 
error logging enabled. 

Operations con^leted 31 

Owner UIC [11,340] 

Dev Prot S:RHED,0:RWED, G:RNED.W:RWED 
Default buffer size 2048 

Relative volume no . 

Transactin count 1 

Mount count 1 

Format Normal- 11 

Volume status: beginning-of-tape, odd parity. 

S COPY SYSSSYSTEMtSYSDUMP.DMP TAPE 

$ COPY/EXCLUDE=*.DAT SYS$LIBRARY:* . * TAPE 

$ 

%%%%%%%%%%% OPCOM 4-JUL-1984 14:35:20.47 %%%%%%%%%%% 

Request 1, from user BIERLY 

MOUNT new relative volume 2 (BACKUP2) on_MUAO : 

$ SET PROCESS/PRIVILEGE=OPER 

S REPLY/INITIALIZE=1 "BACKUP2" 

$ 

BACKUP 2 

14:41:16.86, request 1 was completed by operator _OPAO : 

$ 

$ SHOW DEVICE/FULL TAPE 

Magtape MUAO:, device type TK50, is online, allocated, mounted, 
error logging enabled. 

Error count 
Owner process 
Owner process ID 
Reference count 

Volume label 
Record size 
Mount status 
ACP process n£une 
Density 

Volume status; end-of-file, odd parity 

$ DISMOUNT TAPE 
$ DEALLOCATE TAPE 
$ DEASSIGN TAPE 



3 
" TTAl:" 
0000009D 

1 


Operations completed 
Owner UIC 

Dev Prot S :RWED, 0:RWED, 
Default buffer size 


14110 

[11,340] 

G:RWED.W:RWED 

2048 


"BACKUP2" 

Process 


Relative volvune no. 
Transaction count 
Mount count 


2 
1 

1 


1600 


Format 


Normal- 11 
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Creating Multivolume Tape Sets on More than One Drive 

Initialize the first volume, assigning it some volume label 

• List names of drives in MOUNT command and include /INITIALIZATION=CONTINUATION 
qualifier 

System will then: 

— Initialize and mount subsequent volumes on drives you specified In the MOUNT 
command if you have loaded the volumes on the drives 

— Generate label names automatically based on user-specified label and relative volume 
number 

— Subsequent labels are created by using the first four characters of the specified label 

Underscore {"_") used to pad labels specified with fewer than four characters (see 
Table 4^23) 



Table 4-23: Generating Labels Automatically 



Specified Label Corresponding Generated Label 

(First Volume) (Second and Subsequent Volumes) 

MAIN MAIN02, MAIN03,... MAIN99 

T1 5 T1 5_02, T1 5_03,... T1 5_99 

DAN DAN_02, DAN_03,... DAN_99 

BACKUP BACK02, BACK03,... BACK99 
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BACKUP Tape Label Processing 

• BACKUP checks the tape label for expiration before attempting to write to it 
— BACKUP will not allow writing to a tape that has not yet expired 
~ Use the /IGNORE=LABEL_PROCESSING qualifier to override this situation 
Always set an appropriate expiration date when creating a BACKUP save set on tape 
Be sure to specify the /REWIND qualifier when setting the expiration date 

$ BACKUP /RECORD/SINCE=YESTERDAY DISK$USER: [*. . . ] - 
$ MOA0:MAY0688.BCK /REWIND/TAPE EXPIRATION=13-MAY-1988 
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BACKUP Journal Files 

BACKUP can create a Journal file when creating a save set 

— Contains BACKUP operations and file specifications 

— Provides an efficient way to retain and list "directories" of muitivoiume tape save sets 

— Useful for quici<ly determining the location of files that must be restored 
Use the /JOURNAL=f lie-spec qualifier to create a joumal file 

$ BACKUP /RECORD/ JODRNAL=MAY0688.BJL - 

_$ DISK$USER: [PAYROLL...] - 

_$ MOA1:MAY0688.BCK /REWIND/TAPE_EXPIRATION=13-MAY-1988 

• Default file specification for journal files: SYS$DISK:[]BACKUP.BJL 
Joumal files are written in a binary format 

— Use /LIST/JOURNAL=f ile-spec to list contents 

— Do not specify an input- or output-specifier when listing a joumal file 

$ BACKUP /LIST/JOURNAL=MAY0688.BJL 
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Table 4-24: Examples of Common BACKUP Operations 



Operation 



Save Command 



Restore Command 



Full backup operations 



niysical backup 

Image, disk to 
tape 



Lnage, disk to 
disk 



Image, disk to 
save set in disk 
diiBctoiy 

Image, disk 
to save set on 
multiple disks 



$ BACKOP/PHYSICALDUAO: DOAl : 

$ BACKUP /IMAGK /RECORD - 

_$ DUAO : - 

_$ MOA0:01JAN1990.BCK- 

_$ /INITIALIZE/REWIND/BUFFBR=5 

_$ /TAPE_EXPIRATION=8-JAN-1990 

_S /DENSITY=1600/BLOCK=32768 

$ BACKUP/ IMAGE/RECORD - 
_$ DUAO ! - 
_$ DUAl : 

$ BACKUP/ IMAGE /RECORD - 

_$ DUAO : - 

_$ DUAl: [BACKUP] 01JAN1990.BCK - 

_$ /SAVE_SET 

$ BACKUP/ IMAGE/RECORD - 
_$ DUAO : - 
$ DUA1:01JAN1990.BCK/SAVE SET 



$ BACKUP /IMAGE - 
_$ MDAO ! 01 JAN1990 , 
$ DUAO : 



BCK/BUFFER=5 - 



$ BACKUP /IMAGE - 
_$ DUAl : [BACKUP] 01JAN1990 , 
_$ /SAVE_SET - 
$ DUAO : 



BCK 



$ BACKUP /IMAGE - 

_$ DUAl :01JAN1990. BCK/ SAVE_SET - 
$ DUAO : 



Incremental backup operations 



Disk to t2^ 



Disk to save set in 
disk directory 



Disk to save set 
on multiple disks 



$ BACKUP /SINCE=BACKUP /RECORD - 
_$ DUAO: [000000. ..]*.*.* - 
_$ MUAO : 1 JANl 990 . BCK - 
_$ / INITIALIZE/REWIND /BUFFER=5 
_$ /TAPE_EXPIRATI0N=8- JAN- 1990 
_$ /BLOCK=32768/DENSITY=1SOO 

S BACKUP /SINCE=BACKUP /RECORD - 
_S DUAO: [000000. ..]*.*.*- 
_$ DUAl : [BACKUP] 01JAN1990.BCK - 
_S /SAVE_SET 

$ BACKUP /SINCE=BACKUP /RECORD - 
_S DUAO: [000000. ..]*.*.* - 
$ DUA1:01JAN1990.BCK/SAVE SET 



$ BACKUP /INCREMENTAL - 
_$ MUAO : 01JAN1990 . BCK/BUFFER=5 
$ DUAO : 



$ BACKUP /INCREMENTAL - 

_$ DUAl : [BACKUP] 01JAN1990 .BCK - 

_$ /SAVE_SET - 

_$ DUAO : 

$ BACKUP /INCREMENTAL - 
_$ DUAl :01JAN1990. BCK/ SAVE_SET - 
$ DUAO : 
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Table 4-24: Examples of Common BACKUP Operations Cont. 



Operation Save Command 



Partial backup operations 



Disk to tape 



Disk to disk 



Disk to save set in 
disk directory 



Disk to save set 
on multiple disk 



$ BACKUP/RECORD - 

_$ DUAO : [ SMITH ...]*.*.* - 

_$ MUAO: SMITH. BCK - 

_$ /INITIALIZE/REWIND/B0FFER=5 

_$ /TAPE_EXPIRATION=l-JAN-1993 

_$ /DENSITY=1600/BLOCK=32768 

$ BACKUP - 

_$ DUAO: [SMITH. . .]*.*.* - 

_$ DUAl : 

$ BACKUP /RECORD - 
_$ DUAO : [SMITH. ..]*.*.*- 
_$ DUAl: [BACKUP] SMITH. BCK - 
_$ /SAVE_SET 

$ BACKUP /RECORD - 

_$ DUAO: [SMITH. ..]*.*.* - 

_$ DUAl: SMITH. BCK/ SAVE SET 



Restore Command 



$ BACKUP - 

_$ MDAO : SMITH . BCK/BUFFER=5 
$ DUAO : 



$ BACKUP - 

_$ DUAl: [BACKUP] SMITH. BCK - 

_$ /SAVE_SET - 

_$ DUAO : 

$ BACKUP - 

_$ DUAl: SMITH. BCK/ SAVE_SET 
$ DUAO : 
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standalone BACKUP 

Use standalone BACKUP to back up system disk, since system disk is constantly being 
used while VMS is ainning 

To back up system disk 

— Shut down VMS 

— Boot standalone BACKUP kit to copy system disk 

— Enter BACKUP/IMAGE command 

— Reload console media and boot the system when backup is complete 
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VERIFY UTILITY 

Checks readability and validity of file structure 
Modes of operation 

— Error reporting with no repairs 

— Error reporting with repairs 

— Error reporting with user-controlled selective repairs 
To run on data disk, mount it privately 

To run on system disk, first force all users to log out 
DCL command format: 

S ANALYZE/DISK_STRUCTURE device-name [/qualifier...] 



Table 4-25: Using the VERIFY Utility 



Function 



Command/Example 



Comments 



Running VERIFY to 
find errors in the file 
structure 

Running VERIFY 
to report and repair 
errors 



Running VERIFY 
to report errors and 
allow the user to 
decide what gets 
repaired 



$ ANALYZE/DISK_STROCTORE device-name 

$ ANALYZE/DISK_STRDCTURE MYDISK 

$ ANALYZE/DISK_STRUCTURE - 
_$ device-name/REPAIR 

$ ANALYZE/DISK_STRUCTURE - 
_$ MYDISK/REPAIR 

$ ANALYZE/DISK_STROCTDRE - 

_$ device-name/REPAIR/ CONFIRM 

$ ANALYZE/DISK_STROCTURE - 
$ MYDISK/REPAIR/ CONFIRM 



Using no parameter quali- 
fier Invokes VERIFY in the 
error-reporting mode. 

The /REPAIR qualifier 
causes automatic repair of 
all errors located in the file 
structure. 

The qualifiers /REPAIR 
and /CONFIRM cause the 
utility to display errors, ask 
the user If the error should 
be corrected, and carry 
out the user's response. 
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Example 4-8: Using the VERIFY Utility 

$ MOUNT DRA2 PROGRAM_DISK MYDISK 

%MOUNT-I-MOUNTED, PROGRAM_DISK mounted on _DRA2: 
$ ANALYZE /D I SK_STRUCTURE MYDISK 
%VERIFY-I-OPENQUOTA, error opening QUOTA. SYS 
-SYSTEM-W-NOSUCHFILE, no such file 
%VERIFY-I-LOSTHEADER, file (11,2,1) UTLIST.DAT;! 

not found in a directory 
%VERIFY-I-LOSTHEADER, file (12,2,1) UTLIST.COM;! 

not found in a directory 
$ 

$ ANALYZE/DISK_STRUCTURE/REPAIR/CONFIRM MYDISK 
%VERIFY-I-OPENQUOTA, error opening QUOTA. SYS 
-SYSTEM-W-NOSUCHFILE, no such file 
%VERIFY-I-LOSTHEADER, file (11,2,1) UTLXST.DAT/l 

not found in a directory 
Repair this error (D to delete) ? (D, Y or N) : Y 
%VERIFY-I-LOSTHEADER, file (12,2,1) UTLIST.C0M;1 

not found in a directory 
Repair this error (D to delete) ? (D, Y or N) : Y 
$ 
$ DIRECTORY MYDISK: [SYSLOST] 

Directory MYDISK: [SYSLOST] 

UTLIST.C0M;1 UTLTST.DAT/l 

Total of 2 files. 
$ 
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TRANSFERRING FILES BETWEEN VAX AND PDP-11 
SYSTEMS 



utilities that can be used 

— EXCHANGE 

— RMSBCK 

— RI^SRST 



Table 4-26: Transferring Flies Between VAX and PDP-11 Systems 



RSX 



RSTS 



RT-11 



System Operation 



Comments 



Preparing a volume on 
VMS for use on RSX 



Preparing a volume on 
RSX for use on VMS 



Transfening RMS files 
between systems 



Transferring non-RMS 
files between systems 



Transferring files between 
RT-11 and VMS 



Ttie only special action needed to prepare a 
volume for use on RSX is to initialize the volume 
using the /STRUCTURE_LEVEL=1 qualifier. See 
the description of the INITIALIZE command in the 
VMS DCL Dictionary. 

VMS understands the RSX file structure. You can 
create RSX volumes and use them on a VMS 
operating system without taking special action. 

Use RMSBCK to create a tape volume containing 
the files you want to transfer. Transfer the files from 
the tape to the target system using RMSRST. See 
the the RM$-11 User's Guide for more information. 

Use the EXCHANGE utility to transfer the files from 
the transportable medium to the target system. 
See the VMS Exchange Utility Manual for more 
information. 

Use the EXCHANGE utility. See the VMS Ex- 
change Utility Manual. 
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SUMMARY 

A system manager should be able to prepare and maintain volumes 
Volume preparation includes 

— Locating bad blocks {ANALYZBMEDIA) 

— Initializing tfie volume (INITIALIZE) 

— Mounting the volume (MOUNT) 

— Defining access to the volume (INITIALIZE and MOUNT) 
Obtain volume information with SHOW DEVICE 

h^odify volume information with SET VOLUME 

Create volume sets when files or directories are too large to fit on a single volume 

• Use BACKUP to save 

— An entire volume 

— Only modified files since last backup 

— Specific files 

Use BACKUP to restore 

— An entire saveset 

— Specific files 

Use standalone BACKUP to save/restore the system volume 

• Use the VERIFY utility (ANALYZE/DISK_STRUOTURE) to check integrity of disk volumes 

— Can choose to locate errors and optionally repair them 
Utilities to transfer files between VAX and PDP-11 systems 

— EXCHANGE 

— RMSBCK 

— RMSRST 
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MODULE 5 
CUSTOMIZING THE SYSTEM 



Customizing the System 5- 1 



INTRODUCTION 

Essentially, every VMS system is a customized system. Not only does the choice of hardware 
vary between installations, this hardware can be configured many ways. MODULE 1, discussed 
many of these hardware options, along with a number of software choices for VMS systems. 

From these choices, you should configure your system and Install software to meet the needs 
of your users. However, standard hardware and software may not entirely satisfy users' needs. 
Typically, you must also customize the software on your system. You can customize the 
software by: 

Creating user accounts 

Establishing disk quotas as needed 

Creating user directories 

Initializing queues 

Mounting disk volumes 

Modifying system parameters 

Changing passwords 

Setting up files and directories for standalone BACKUP and for copying the console volume 

Previous modules covered many of the skills you use to customize the VMS environment, such 
as creating user accounts and queues. This module discusses some other customizing skills, 
such as creating site-specific command procedures and modifying the DCL environment for a 
user. As you customize the system using all of the skills discussed In this course, you can 
improve its performance and efficiency. MODULE 9, discusses performance Improvement in 
greater detail. 
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OBJECTIVES 

To customize a system, the system manager should be able to modify the site-specific startup 
lies and/or enter DCL commands interactively to perform tasks discussed in earlier modules of 
his course (such as creating batch and print queues) as well as: 

Identify the functions of the different system startup files 

Set device characteristics 

Mount site-specific volumes 

Create system logical names 

Install images 

Define and start queues 

Create reports about the last system failure 

Start local DECnet 

Announce system availability 



RESOURCES 

1 . VMS System Generation Utility Manual 

2. VMS Install Utility Manual 

3. Guide to Setting Up a VMS System 

4. VMS instaiiation and Operations for your particular VAX system 
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USER ENVIRONMENT 

Principal methods of defining default process environment 

— Setting system parameters 

— Issuing DCL commands 

Process default environment is established In two stages 

— At system startup 

System-wide default Is established 

— When a process is created 

Individual process environment is customized 
Process environment can also be customized Interactively 

Table 5-1 : Flies Controlling the VMS Environment 



File 



Information in File 
Used to Control 
VMS Environment 



When Information in File 
is Automatically Used 



SYS$SYSTEM :VAXVMSSYS. PAR 

SYS$SYSTEM:STARTURCOM 

SYS$MANAGER:SYPAGSWPFILES.COM 



SYS$MANAGER:SYCONFIG.COM 

SYS$MANAGER:SYLOGICALS.COM 

SYS$MANAGER:SYSTARTUP_ 
V5.COM 



SYS$MANAGER:SYLOGIN.COM 



SYS$LOGIN:LOGIN.COM 



System parameters 

DCL commands 

DCL commands 
and possibly SYS- 
GEN 
commands 

DCL commands 

DCL commands 

DCL commands 
and possibly IN- 
STALL 
commands 

DCL commands 
DCL commands 



System startup 
System startup 
System startup 



System startup 
System startup 
System startup 



Interactive or batch process 
creation 

Interactive or batch process 
creation 



Customizing the System 5- 5 



SYSTEM STARTUP FILES 

There are five startup command procedures distributed as part of VMS: 

1. SYS$SYSTEI\4:STARTUP.C0I^ 

Site-independent 

Commands supplied by DIGITAL 

Do not modify 

2. SYS$MANAGER:SYPAGSWPFILES.COM 

Site-specific 

Initially empty 

Used to install page and swap files on any disk 

3. SYS$MANAGER:SYC0NFIG.COM 

Site-specific 

Initially empty 

Connects various devices to system and loads their I/O drivers 

If left empty, system automatically configures all devices 

4. SYS$MANAGER:SYLOGICALS.COM 

Site-specific 

Template file supplied by DIGITAL 

Used to define system-wide logical names 

5. SYS$MANAGER:SYSTARTUP_V5.C0M 

Site-specific 

Template file supplied by DIGITAL 

General location for site-specific customization commands not addressed by other 

site-specific startup command files 

Overrides commands in STARTUP.COM 
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SYS$SYSTEM:STARTUP.COM 

Executes immediately after VMS is booted 
Uses a series of component files that perform: 

— Defines system-wide logical names for standard system software 

— Starts up system processes, such as: 

JOB_CONTROL 

OPCOM 

ERRFMT 

— Connects all standard devices 

— Installs known images (standard and layered software products) 

— Calls site-specific startup command procedures in this order: 

1. SYS$MANAGER:SYPAGSWPFILES.COM 

2. SYS$MANAGER:SYCONFIG.COM 

3. SYS$MANAGER:SYLOGICALS.COM 

4. SYS$MANAGER:SYSTARTUP_V5.COM 

Component files are located according to the logical name SYS$STARTUP 

— Actually a search list that includes: 

SYS$SYSROOT:[SYSMGR](SYS$MANAGER) 
SYS$SYSROOT:[SYS$STARTUP] 

STARTUP.COM starts up the system in phases 

— Four basic phases 

— Three data files involved in the phased startup (all located in SYS$STARTUP): 

VMS$PHASES.DAT (do not modify) 

VMS$VMS.DAT (do not modify) 

VMS$LAYERED.DAT (managed through use of SYSMAN utility) 
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SYS$MANAGER:SYPAGSWPFILES.COM 

• Invoked by SYS$SYSTEM:STARTUP.COM 

Used to install page and swap files on disks other than the system disk 

• Before invoking SYPAGSWPFILES.COM, the system activates the following files If they 
exist in SYS$SYSTEM: 

— PAGEFILE.SYS 

— SWAPFILE.SYS 

— SYSDUMRDMP 

• STARTURCOM then invokes SYPAGSWPFILES.COM 

Place whatever commands are needed to install page and swap files 

— INITIALIZE 

Needed to initialize a new disk volume (rare situation) 

— MOUNT 

Disks containing secondary page and swap files are not yet mounted 

— SYSGEN Commands 

To create and/or install secondary page and swap files 
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SYS$MANAGER:SYCONFIG.COM 

. Invoked by SYS$SYSTEM:STARTUP.COM 

Used to connect special devices and load their I/O drivers 

— Only necessary for nonstandard devices or unusual device settings 
SYSGEN commands are typically placed In this file 

• You can optionally place MOUNT commands in this file 

— Most sites mount remaining disl^s in SYSTARTUP_V5.COM (descrlljed later) 

• When SYC0NFIG.COM completes, control is returned to STARTUP.COM 

— STARTUP.COM automatically connects all remaining devices and loads their I/O drivers 

— Connecting and loading is accomplished by SYSGEN AUTOCONFIGURE ALL 
command 
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SYS$MANAGER:SYLOGICALS.COM 

• Invoked by SYS$SYSTEM: STARTUP. COM 
Used to create system-wide logical names 

Define system components as executive mode logical names 
To create system logical names: 

$ ASSIGN/SYSTEM 
$ DEFINE/SYSTEM 

To delete system logical names: 

$ DBAS SIGN/ SYSTEM 

• Typically use the /NOLOG qualifier when defining logical names during system startup 

Executive Mode Logical Name Requirements 

• Logical names for system components and files must be executive mode 

• Examples of components and files requiring executive mode logical names: 

— Public disks and directories 

— SYSUAF.DAT 

— RIGHTSLISTDAT 

— VMSMAILDAT 

— NETPROXYDAT 

To define an executive mode logical name: 

$ DEFINE/SYSTEM/EXECDTIVE logical-name equivalence-name 
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Table 5-2: Assigning System Loglcai Names 



Operation 



Command Format/Example 
(Requires SYSNAM privilege) 



Create or replace a system 
logical name 



S ASSIGN/SYSTEM eqv-ticune log-name 
$ DEFINE/ SYSTEM log-name eqv-name 
$ ASSIGN/ SYSTEM SYS$SYSTEM:NOTICE.TXT NOTICE 



Delete a syi 


stem logical name $ deassign/system log-name 

$ DEASSIGN NOTICE 




Table 5-3: 


Some Standard Logical Names to Define In SYL0GICALS.COM 


Name 


Definition Function 



SYS$SYLOGIN 



SYS$ANNOUNCE 



SYS$WELCOME 



Name of system manager's 
login command procedure 

Line of text or name of file 
containing text 

Line of text or name of file 
containing text 



The system executes this procedure 
when it creates a process. 

The system displays this line or the 
contents of the file when the user 
presses the RETURN key to log In. 

The system displays this line or the 
contents of the file after a user suc- 
cessfully logs In (by default, "welcome 

to VMS V5.0") 



Example 5-1 : Assigning Site-Specific System Logical Names (SYL0GICALS.COM) 



$ ! Define site-specific logical neunes 

$4j Rw T ew /system /exec sys$sylogin 
$Cassj«n /system /exec SyS$TOOLS 

$ y-ASS^SN /SYSTEM /EXEC SYS$ANNOUNCE 
S ^-'ASSiCN /SYSTEM /EXEC SYS$WELCOME 
$! 



SYSSMANAGER: SYLOGIN 
DISK$DSER: [TOOLS] 
"This is the MENTOR system" 
" @ S YS $MANAGER : WELCOME . TXT " 
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SYS$MANAGER:SYSTARTUP_V5.COM 

The last site-specific startup command procedure invol<ed by STARTUP.COM 

• Functions performed by SYSTARTUP_V5.COM 

— Mounts all volumes except system disk 

— Sets device characteristics 

— Initializes and starts batch and print queues 

— Installs known images 

— Starts up DECnet software (If it exists) 

— Analyzes most recent system failure 

— Purges old operator log files 

— Starts up the LAT networi< (If it exists) 

— Defines the maximum number of Interactive users 

— Announces system is up 

— Allows users to log in 

• Use separate command procedures for major functions 

— Keeps SYSTARTUP_V5.COM small and manageable 

— Allows clean, separate execution of functions after system has been started 

Sometimes needed when certain failures occur and the function needs to be 
reactivated (example: print and batch queues) 
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Example 5-2: SYSTARTUP_V5.COM Command Procedure 



$ SET NOON 

$ SET NOCONTROL_Y 

++ 

SyS$MANAGER : SYSTARTDP V5 . COM 



This is a sanpie site-specific system startup command file 



$ 

$ 

$ 

$ 

$ 

$ 

$ ! Create logical name for supporting command procedures 

S DEFINE/NOLOG STARTOP_PROCS SYS$SYSRO0T: [SYSM6R.START0P] 

$ ! 

$ ! Mount site-specific volumes 

$ 8STARTaP_PR0CS:M0DNTDSK.C0M 

$ ! 

$ ! Set device characteristics 

$ eSTART0P_PR0CS : DEVICES , COM 

S ! 

$ ! Start the queue manager 

$ START /QOEUE /MANAGER 

$ ! 

$ ! Define and start print queues 

$ eSTARTUP_PROCS:START_PRNT_QUEUE,COM 

S ! 

$ ! Define and start batch queues 

$ STARTDP_PROCS : START_BATCH_QDEOE . COM 

$ ! 

$ ! Install known images 

$ e STARTUP_PROCS : INSTALL . COM 

$ ! 

$ ! Start DECnet 

$ @SYS$MANA6ER: STARTNET.COM 

$ ! 

$ ! Create reports about the last system failure 

$ eSTARTUP_PROCS : REPORT_FAILURE . COM 

$ ! 

$ ! Purge old versions of system log files 

$ PORGE SYS$MANA6ER:*.L0G/KEEP=3 

$ ! 

$ ! Set the maximum number of interactive users 

$ STARTOP$INTERACTIVE_LOGINS = 40 

$ ! 

$ ! Announce availability of the system to all terminals 

$ SUBMIT STARTDPJPROCS: START_ANN0UNCE.COM 

$ 

$ 

$ 

$ EXIT 



End of SYS$MANAGER: STARTUP V5.COM 
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Mounting Site-Specific Volumes 

Mount volumes in site-specific startup command procedure 

$ MOUNT/SYSTEM device-spec volume-label logical-name 

Do not mount voiumes in site-independent startup command procedure (not even the 
system disk) 

• By default in SYSTARTUP_V5.COM, MOUNT implies MOUNT/NOASSIST 

• /SYSTEM qualifier: 

— Makes volume public (available to all users) 

— Stores specified logical name in system logical name table 

— Assigns concealed and terminal attributes to logical name 

Specifying a logical name with each mounted disit Improves the user interface for: 

— Issuing commands 

— Displaying file specifications In listings 

• If no logical name Is specified, a default logical name is created 

— Fornnat: DISK$volume-label 

WAIT statement needed prior to mounting the first DSA disk 

— Wait time is controller dependent 

— Refer to VMS I/O User's Reference Manual: Part I for details on time value 
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Example 5-3: Mounting SIte-SpecIf Ic Volumes (M0UNTDSK.COM) 

$! 

$! Mount public disk volumes 

$'. 

$ MOUNT /SYSTEM DBA2: DATA13 DATADISK 

$ MOUNT /SYSTEM DBA3: USER 



Customizing the System 5-15 



Setting Device Characteristics 

Most common situation Is setting tenninal characteristics 

• SYSGEN AUTOCONFIGURE ALL command in STARTUP.COM determines the number of 
terminal ilnes the system can support 

• Other commands in SYSTARTUP_V5.COM set physical characteristics of attached 
terminals 

— Best done with a separate command procedure called by SYSTARTUP_V5.COM 

Can modify permanent characteristics interactively, but effective only until next startup 

Can also set physical characteristics for such devices as printers, tape drives, and card 
readers 

— Many sites prefer to set printer and card reader characteristics in command procedure 
called to establish print and batch queues 

Makes it easier to match queues with physical devices 
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Table 5-4: Setting Permanent Characteristics of Terminals 
SET TERMINAUPERMANENT 



Characteristic 



Command Qualifiers 
and Examples! 



Comments 



Una speed, for 
direct lines 



/ SPEED /NOMODEM 



$ SET TEPMINAL/FEBM&MENT 



By default, all lines have the speed 
specified by system parameter TTY_ 
SPEED. 



Une speed, 
for lines con- 
nected through 
modems 

Terminal type, 
for direct lines 



_$ /SPEED=9600/NOMODEM TTF5 
/AOTOBAUD /MODEM 

$ SET TEBMIMAL/PEBMANENT 

_$ /AOTOBAOD/MODEM TTAl 
/DEVICE_TYPE=type 

$ SET TEBMIMAL/PEBMANENT 

S /DEVICE TYPE=VT100 TTC2 



VMS does not send broadcast messages 
to autobaud lines unless the terminal is 
logged in. 



Among the recognized device types are: 
LA36, l_A120, VT52, and VT100. This 
one qualifier is a substitute for many 
individual qualifiers, each specifying only 
one characteristic. To list the available 
device types, enter the command HELP 
SET TERMINAL/DEViCE_TYPE. Many 
characteristics of the terminal are modified 
when you specify a device type, saving you 
from having to enter each one separately. 



tRequires LOG_IO or PHYJO privilege. 
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Table 5-5: Establishing Ownership and Protection of Terminals and Other Nonshareable 
Devices 



Operation 



Command Examples 
(Requires OPER Privilege) 



Comments 



Establishing protec- 
tion ownership 



Allowing all users 
access to a device 



$ SET PROTECTION=code/DEVICE - 
_$ /OWNER_UIC=uic device 

$ SET PROTECTION=(S:R,0:R,G,W) 
_$ /DEVI CE/OWNER= [JONES] TTA3 



$ SET PROTECTION/DEVICE device 
S SET PROTECT ION/ DEVICE TTA3 



If you give Read access 
to a category of user, 
users in that category 
can allocate the terminal 
from a program. Other 
users can log in to the 
terminal. 

If you omit a user cat- 
egory, users in that 
category are allowed all 
types of access to the 
device. 
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Control device ownership and protection 

$ SET PROTECTION/DEVICE 

Commonly used protection on terminals 

— Owner: [1 ,4]; protection: (S:R,0:R) 

— Prevents nonprivileged users from allocating terminals 

— Does not prevent nonprivileged users from logging in 

— DefiMJt ownership and protection established by system parameters 

Example 5-4: Setting Device Characteristics (TERMiNALS.COM) 

$ SET TERMINAL/PERMANENT/DEVICE=LA120/NOLOWER TTCO : IHARDCOPY 

S SET TERMINAL/PERMANENT/NOMODEM/SPEED=9600/DEVICE=VT100 TTAO: !M. BROWN 

$ SET TERMINAL/PERMANENT/NOMODEM/SPEED=1200/DEVICE=LA120 TTAl: !R. JONES 

$ SET TERMINAL/PERMANENTMOTOBAUD /MODEM TTA2 : ! DIAL-OP 

Initializing and Starting Queues 

• Establish all queues (print and batch) in one or more separate command procedures 

— Invoked by SYSTARTUP_V5.COM 

— Use commands and techniques described in MODULE 3. 
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Installing Known Images 

Reasons for installing 

— Reduces time required for Image activation 

— Enables image to execute with privileges that the process running the image lacks 

— Promotes sharing of physical memory 

— Can add user-written system service 

• Use the INSTALL utility 

• Can use INSTALL to "undo" what STARTUP.COM has Installed 

— Remove some Images 

— Reinstall some images with different privileges or attributes 

NOTE 
Do not confuse the two different VMS uses of tHie word ''install." 

1 . InstaU known images (discussed here) 

2. Install VMS operating system or optional software (discussed in MODULE 7) 

;' ^ 

f 




\^ 



->. 




< 


>i 




■^ 


I 






*_> 




- 1,, 


■ 4. 






>'' 






A 






V 






^ 


-■t 




\ 


, 


) 


\ 


"■? 




\^ 


■■,. 




< 








\A 





5- 20 Customizing the System 



Table 5-6: Functions of the INSTALL Utility 



Operation 



Command Format and Example(s) 



Comments 



Installing a known 
image and specify- 
ing optional charac- 
teristics 

Installing a new 
version of a known 
image witli the 
same characteris- 
tics as the existing 
version 



Installing a new 
version of a known 
image with different 
characteristics than 
the existing version 

Removing a known 
image 

Displaying informa- 
tion about a known 
image or about 
INSTALL 



INSTflLL> CREATE [/qualifier (s)] file- 

apec 

INSTALL> CREATE/OPEN/SHARED EDT 



INSTALL> REPLACE file-spec 
INSTALL> REPLACE EDT 



INSTALL> REPLACE [/qualifier (s)] file- 
spec 
INSTALL> REPLACE/OPEN/SHARED/HEADER EDT 



INSTALL> DELETE file-spec 
INSTALL> DELETE EDT 

INSTALL> LIST [/qualifier (3)] [file- 
spec] 

INSTALL> LIST/FOLL 
INSTALL> LIST/GLOBAL 
INSTALL> HELP LIST 
INSTALL> HELP ADD 
INSTALL> HELP REPLACE/OPEN 



Qualifiers used to specify 
optional characteristics 
are shown in Table 5-7. 

Note that INSTALL uses 
the following file specifier 
defaults: 

Device and directory: 
SYS$SYSTEM 
File type: .EXE 
Version number: highest 

Specifying a version 
numt}er will produce 
unpredictable results 
when you use the known 
image. Therefore, never 
specify a version number 
in the file specification. 



If you omit the file specifi- 
cation, INSTALL displays 
all known file entries. 
Qualifiers used to display 
Information include: 

/FULL 

/GLOBAL 

/STRDCTURE 
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Table 5-7: INSTALL Command Qualifiers 



Qualifier 



Description 



/ACCOUNTING 

/EXECDTE_ONLY 
/HEADER RES 



/LOG 

/NOPORGE 

/OPEN 

/PRIVILEGED" (priv, . . . ) 

/PROTECTED 
/SHARED 



/WRITEABLE 



Activate image level accounting for the installed image. 
(Discussed in IVIODULE 9). 

Install the image with execution-only access permitted. 

The header of the image file (native images only) remains 
permanently resident in memory, saving one disk I/O operation 
per file access. The image Is Implicitly declared permanently 
open (/OPEN). 

List the newly created known file entry along with any associated 
global sections created by the Installation. 

Specifies that this image will not be deleted by the INSTALL 
command PURGE. 

Directory information on the image file remains permanently 
resident in memory, eliminating the usual directory search 
required to locate a file. 

Amplified privileges are temporarily assigned to any process 
running the image (executable Images only), permitting the 
process to exceed its UAF privilege restrictions during execution 
of the image. 

A shareable image contains protected code (code that njns in 
kemal or executive mode) but that can be called by a user-level 
image. Protected images must be declared /SHARED. 

More than one user can access the read-only and noncopy 
on-reference read/write sections of the image concurrently. 
Therefore, only one copy of those sections ever need be in 
physical memory. The image is implicitly declared permanently 
open (/OPEN). 

Shared noncopy, noncopy_on-reference writeable sections are 
written back to the image file when removed from physical 
memory (for paging reasons or because no processes are 
referencing It). The image must also be declared /SHARED. 
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Example 5-5: Installing Known Images (INSTALL.COM) 

$! 

$! Install known images, most frequently activated LAST 

$! 

$ INSTALL 

CREATE SYS$SYSTEM:REPLY /PRIV=OPER 

CREATE SYSSSYSTEM:BLISS32 /OPEN /SHARED 

CREATE SYS$ SYSTEM: MACROS 2 /OPEN /SHARED 

CREATE SYS$SYSTEM:NCP /OPEN /SHARED 

Reinstall SHOW with WORLD privilege 

REPLACE SYS$SYSTEM:SHOW /OPEN /SHARED /HEADER_RES - 

/PRIV= (CMKRNL, WORLD, NETMBX) 

Reinstall the linker to be shared in memory 

REPLACE SYS$ SYSTEM: LINK /OPEN /SHARED /HEADER RES 

1 — 



Starting Local DECnet 

Optional product required to communicate witii ottier systems 

• Single-node DECnet included witti VMS 

• File: STARTNET.COM 

— VMS operating system installation procedure copies STARTNET.COM into 
SYS$MANAGER directory 

— lnvol<e STARTNETCOM from SYSTARTUP_V5.COM or submit it as a batch job 
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Creating Reports About the Last System Failure 

System failure may be due to: 

— Power loss 

— Hardware errors 

— Software errors 

— Intentional actions by system manager 

• When the system fails, contents of memory are written to the crash dump file 

— To analyze the crash dump file: 

1 . Invoke System Dump Analyzer (SDA) utility 

$ RNALYZE/CRASH_DTJMP 

2. Create listing of information in the dump file using SDA commands 

— Should include commands in SYSTARTUP_V5.COM to create SDA listing file 

Example 5-6: System Failure Report Procedure (REP0RT_FAILURE.COM) 

$ ! 

S ! Analyze the most recent crash 

$ ! 

S JUJALYZE/CRASH_DUMP SYS$SYSTEM:SYSDUMP .DMP 

COPY SYS$ERRORLOG : SYSDOMP . DMP 

SET OUTPUT LPAO:SYSDUMP.LIS 

SHOW CRASH 

SHOW STACK/ALL 

SHOW SUMMARY 

SHOW PROCESS/PCB/PHD/FEGISTERS 

EXIT 
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Setting the Maximum Number of Interactive Logins 

VMS default number is 64 
• Changeable by setting the symbol STARTUP$INTERACTIVE_LOGINS 

$ STARTUP$INTERACTIVE_LOGINS == 40 

Cannot set the maximum numt>er above the number specified in your VAX processor 
license 



Announcing System Availability 

Use the REPLY command to announce system availability. 



Example 5-7: Announcing System Availability (START_ANN0UNCE.COM) 

$! 

$ ! Announce that the system is available 

$! 

$ WAIT 00:00:45.00 ! Let things settle down a bit... 

$! 

$ REPLY/ALL/BELL "ISHAM is now available for use." 
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SUMMARY 

Customize the system by: 

— Establishing paging and swap files 

— l\4odifying device characteristics 

SET DEVICE 
SET TERMINAL 

SYSGEN parameters 

— Defining logical names 

— Installing images (INSTALL utility) 

— Establishing queues 

— Creating system-wide login procedure (SYL0GIN.COM) 

VMS is distributed with several system startup command procedures 

— Never modify these files 

— SYS$SYSTEM:STARTUP.COM invokes site-speclfic command procedures 
• System startup site-specific command procedures 

— SYS$MANAGER:SYPAGSWPFILES.COM 

— SYS$MANAGER:SYCONFIG.COM 

— SYS$MANAGER:SYLOGICALS.COM 

— SYS$MANAGER:SYSTARTUP_V5.C0M 

Most terminal characteristics must be set each time the system is rebooted 

— Use SYC0NF1G.COM to set characteristics 

— Use /PERMANENT qualifier on SET TERMINAL command 

— Typical characteristics set at startup 

Speed 

Protection 

Local/remote 

Device type (LA120, VT200, etc.) 
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Use the INSTALL utility to: 

— Install an image for 

Performance improvement 
Privilege requirements 

— Replace an existing installed image to change installation characteristics 

— Remove an installed image 

Create reports about system failures using SDA ANALYZE/CRASH_DUMP 

— SDA commands typically executed at system startup to report on last failure 

— System dump infonnatlon placed in SYS$SYSTEM:SYSDUMP.DMP 

Define STARTUP$INTERACTIVE_LOGINS to maximum number of interactive users 
Use REPLY command to announce system availability 
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MODULE 6 

STARTING UP AND SHUTTING 
DOWN THE SYSTEM 
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INTRODUCTION 

A VMS system usually remains running for long periods of time. Under certain circumstances, 
hiowever, you must shut tiie system down. Sucfi circumstances include: 

Performing hardware or software maintenance 

Backing up the system disk 

Moving or reconfiguring system hardware 

Upgrading or reconfiguring system software 

Losing electrical power or air conditioning 

Losing operating system response 

VMS provides a command procedure that shuts the system down at a time you specify, and 
notifies system users as that time approaches. Other shutdown methods are also available. 
You can use them when the usual procedure is not effective. 

There are many methods of starting up a VMS system. Because you can record your standard 
system configuration, starting up your system can be as simple as pressing a button. Using 
other startup methods, you can specify alternate system configurations. Also, If you want 
to change to a different standard system configuration, you can modify the configuration 
information VMS reads on startup. 

This module assumes that VMS software has already been configured to ain on your system, 
by following the procedures outlined in MODULE 7 and MODULE 5. 
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OBJECTIVES 

To use a VMS system, a system manager should be able to do one or more of the following: 

Describe the phases of system startup 

Describe the functions of the various components of the console subsystem 

Boot the system from the default system device or from an alternate device 

Run standalone utilities or diagnostics 

Use console commands at system startup and while the VMS system is running 

Use system parameters to build data structures, configure devices, or customize the user 
interface 

Customize the system configuration, using system parameters, boot command procedures, 
and startup command procedures 



RESOURCES 

1. VMS System Manager's Manual 

2. Guide to Setting Up a VMS System 

3. VMS System Generation Utility Manual 

4. VMS Installation and Operations Manualior your specific VAX processor 



6- 4 Starting Up and Shutting Down the System 



STARTING UP A VMS SYSTEM 
Phases of Startup 

1. Hardware loads VMB.EXE, primary bootstrap program 

2. VMB.EXE loads SYS$SYSTEM:SYSBOOT.EXE, secondary bootstrap program 

3. SYSBOOT.EXE loads SYS$SYSTEM:SYS.EXE and other executive images 

4. VMS executive initializes VMS database, creates process running SYS$SYSTEM:SYSINiT.EXE 

5. SYSINIT.EXE continues system initialization, creates t>atch process executing DCL 
commands in SYS$SYSTEM:STARTURCOM 

6. Tiie STARTUP.COM command procedure: 

Executes its own DCL commands 

Executes DCL commands in nested command procedures 

Completes system initialization 
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Figure 6-1 : Startup Phases of VMS 
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VAX Console Subsystem 



Enables you to exercise control over the remaining VAX hardware 
Consists of six parts: 

— Front panel switches and lights 

— Console processor 

— Console device 

— Console terminal 

— Console command language (CCL) 

— Remote diagnosis port (optional) 



Table 6-1 : VAX Console Subsystem 



Component 



Function 



Console processor 

Console command language 
(CCL) 

Console terminal 



Console device 



Front panel switches and 
lights 

Remote diagnosis port 



Interprets and executes console commands affecting VAX 
hardware. It does not require the presence of VMS software. 

Used to express console commands affecting VAX hardware. 

Printing temiinal used to enter CCL commands and display 
responses (console I/O mode). When VMS is mnning, it can 
also serve as an interactive user terminal (program I/O mode). 

IHolds console volume, which may contain console processor 
microcode, VAX microcode and/or CCL command files. Used to 
update VMS, install optional VAX software, and njn diagnostics. 

Used to control system startup, recover from system failure, 
display system status, and perform remote diagnosis. Key 
switch turns power on and off. 

Enables a terminal at the DIGITAL Diagnosis Center to function 
as a remote console terminal. 
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Front Panel Switches and Lights 

Used to start up system 
Switches control processor 
• Lights indicate processor status 



Console Processor and Console Device 

• Consoie processor 

— A smali processor that "front-ends" the VAX processor 

— Used to monitor the overali operation of the VAX processor 

— Accomplishes first startup phase 
Consoie device 

— Contains consoie volume 

— Console volume contains files needed by console processor 

Processor microcode 
Primary bootstrap program 
CCL command files 

— Consoie volume usually required for startup 

— Consoie volume must be mounted in console device 
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Default System Device 



• Each VAX processor supports a method of specifying a default system device 
If system volume Is mounted on default system device, startup is almost automatic 
Steps for startup: 

1 . Prepare the system for booting (by setting switches) 

2. If the power is off, turn it on 

3. Boot the system 

4. Prepare system for automatic restart (optional) 
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Automatic Restart 

Battery backup makes system recovery possible after power failure 

— An optional riardware component 

• Recovery can occur immediately 

If memory is valid after recovery, all processes and batch jobs resume where they left off 
If memory is not valid after recovery, system is initialized 

Alternate System Devices 

• Can specify system device explicitly at system startup 

— If console volume is not customized for default startup 

— To override customized default 

Device codes used at startup are NOT necessarily standard VMS device codes 
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standalone Utilities and Diagnostics 



Can run on VAX processor without VMS 

— Hardware diagnostics 

— VMS utilities 

Start up Wke VMS, using console 

— Larger selection of startup devices 

— Typically use console device 
Example: standalone BACKUP 

Console Commands 

Each VAX processor has its own CCL. 



Issuing Console Commands at System Startup 

For the startup methods discussed in this module, issue CCL commands after receiving 
">»" prompt 



Console terminal serves as CCL command terminal at startup 
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Issuing Console Commands While VMS is Running 

Use the console terminal 

— Program mode: Interactive VMS terminal 

— Console mode: CCL command terminal 
When console terminal is in console mode 

— Most VAX processors continue to run 

— Some VAX processors are halted 

Example 6-1 : Using the Console Terminal Interactively After Startup 

%SET-I-INTSET, login interactive limit « 64, current interactive value « 
SYSTEM job terminated at 18-JUL-1984 20:16:46.67 

Username : SYSTEM 
Password: 

Welcome to VAX/VMS Version 5.0 
$ 

Example 6-2: Using the Console Terminal In Console Mode 



$ SHOW DEFAULT 














W0RK1:[BIERLY] 














$ SHOW TERMINAL 














Terminal ; _OPA0 : 


Device_Type: LA36 


Owner: OPAO 


: 










Daername: BIERLY 


Input ! 300 


LFf ill : 





Width: 132 Parity: 


None 


Output: 300 


CRf ill : 





Page : 24 






Terminal Characteri 


.sties : 












Interactive 


Echo 






Type-ahead 


No 


Escape 


No Hostsync 


TTsync 






Lowercase 


No 


Tab 


Wrap 


Hardcopy 






No Remote 


No 


Holdscreen 


»> 














»>SET TERMINAL PROGRAM 












Broadcast 


No Readsync 




No Form 






Fulldup 


No Modem 






No Local echo 


No 


Autobaud 


No Hangup 


No Brdcstmbx 




No DMA 


No 


Altypehd 


Set_3ped 


Line Editing 




Overstrike editing 


No 


Fallback 


No Dialup 


No Secure server 




No Disconnect 


No 


Pasthru 


No Syspassword 


No SIXEL 


Graphics 


No Soft Characters 


No 


Printer Port 


Ntomerio Keypad 


No ANSI CRT 




No Regis 


No 


Block mode 


No Advanced video No Edit mode 
$ 




No DEC_CRT 


No 


DEC_CRT2 


"P 

»>SET TERMINAL PROGRAM 

$ 
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Customizing Startup and Automatic Restart 

Setting the default system device 

— System dependent 

— Can be set by hardware or software (depending on tlie VAX processor) 

• DIGITAL provides many command files on the console volume that can be chosen for 
DEFBOO.CMD 

— Use command procedure SYS$UPDATE:SETDEFBOO.COM 
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SYSTEM PARAMETERS 

• stored in SYS$SYSTEM:VAXVMSSYS.PAR 

Used to build data structures, configure peripheral devices, and customize user interface 
each time the system starts up 

If modifications are required, they are usually accomplished by the SYSGEN utility or the 
command procedure SYS$UPDATE:AUTOGEN.COM while VI\/IS is running 

• To mal<e modifications while starting up, use the SYSBOOT program during conversational 
startup 

— You can specify a minimum startup 

— Select an altemate file as the source of system parameter values 

— Set and show individual parameter values 

— Specify an altemate site-independent startup procedure 



Table 6-2: Using SYSBOOT During Conversational Startup 



Function 



Examining a system parameter or group of 
parameters 



Modifying a system parameter 

Modifying a group of system parameters 
{.PAR files should be in SYS$SYSTEM) 



Using an alternate DCL startup file 

Exiting SYSBOOT to continue the startup 
procedure 



Command Format and Examples 



SYSBOOT> SHOW parameter 
SYSBOOT> SHOW /parameter-group 
SYSB0OT> SHOW MAXPROCESSCKT 
SYSBOOT> SHOW /ALL 

SYSBOOT> SET parameter value 
SYSB0OT> SET UAFM.TERNATE 1 

SYSBOOT> OSE parameter-file. PAR 
SYSBOOT> USE CURRENT 
SYSBOOT> OSE DEFAULT 
SYSBOOT> USE ALTPARAM.PAR 

SYSBOOT> SET/STARTOP SYS$SYSTEM: startup-file 
SYSBOOT> SET/STARTUP SYS$SYSTEM: ALTSTART 

SYSB0OT> CONTINUE 
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Figure 6-2: Effect of VMS Startup on System Parameters 
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SPECIFYING THE SYSTEM CONFIGURATION 

At each startup 

— System device is selected 

— System parameters determine how VMS database is constructed 

— DCL commands create system environment 
Files determine default system configuration 

— Must be customized 



Table 6-3: Customizing the System Configuration 



Customize 



DEFBOO.CMD 

VAXVMSSYS.PAR 

SYSTARTUP_ 

V5.COM 

SYC0NFIG.COM 



Contents of File 

CCL (or BOOT58) 
commands 

System parameters 
DCL commands 



Location of File 



Console volume 

SYS$SYSTEM 

SYS$MANAGER 



Utility Used for 
Customization 



SYS$UPDATE: 
SETDEFBOO.COM 

SYSBOOT, SYS- 
GEN, or AUTOGEN 

Text editor 
(such as EDT) 
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Controlling Multiprocessing 

Symmetric multiprocessing (SMP) 

— Introduced with VMS Version 5 

— Two or more CPUs in one physical cabinet 

Tightly coupled {equal access to VMS code and resources) 

Address a common pool of memory 

Capable of executing instructions simultaneously 

All CPUs must be at same hardware and firmware level 

— Each CPU has a CPU ID 

— Jobs can run on any CPU (dynamic load leveling) 
Primary processor 

— Logically or physically attached to the console device 

— Performs Initialization activities at system startup 

— Serves as system timekeeper 
Secondary processor(s) 

— All processors other than the primary processor 
Available set 

— Ptxjcessors that have passed power-on hardware diagnostics 

— May or may not be actively Involved in system operations 

Active set 

— Processors in the available set that are actively participating in system operations 



Starting Up and Shutting Down the System 6- 17 



SYSGEN parameters control processor membership and character. 



Table 6-4: SYSGEN Parameters for Multiprocessing Systems 
Parameter Function 



MULTIPROCESSING Determines which synchronization image is loaded into the 

operating system at boot time. 

^"^ "^^"^ Determines which processors are brought into the multiprocessing 



environment at boot time. 



DCL commands for Si\^P systems {require CMKRNL privilege). 



Table 6-5: DCL Commands to Control Multiprocessing Systems 

Commandt Function 



sTART/cPo [cpu-id, . . . ] Starts the specified secondary processor or processors. 

STOP/CPU [cpu-id, . . . ] stops the specified secondary processor or processors. 

SHOW CPU [cpu-id, . . . ] Displays the current state of the processors. 

tRequires CMKRNL privilege. ~ ' ' " 
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SHUTDOWN 

Three methods of system shutdown 

— Orderly shutdown 

— Emergency shutdown from DCL 

— Emergency shutdown from CCL 

Orderly Shutdown 

Preferred method 

— Warns users of approaching shutdown 
- Preserves all system and user data 

Command procedures used 

— SYS$SYSTEM:SHUTDOWN.COM (site-independent) 

— SYS$MANAGER:SYSHUTDWN.COM (site-specific) 
Steps to follow 

1. Log in as SYSTEM 

2. Issue: 8sys$system: shutdown 

3. Respond to message prompts 

4. Wait until the following message is displayed on console terminal: 

SYSTEM SHUTDOWN COMPLETE — USE CONSOLE TO HALT THE SYSTEM 

5. Use the console terminal to type: 

a. CTRUP 

b. >» H 
Canceling shutdown 

— CTRLVY cancels remaining shutdown functions 

— Shutdown functions already accomplished must be manually reversed 
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Functions of SHUTD0WN.COM 

• Displays a notice on ali temilnals that a shutdown is planned 

— Reminds interactive users periodically as shutdown time approaches 

Prevents users from logging In (unless they have OPER privilege) 

Shuts down DECnet 

Stops batch and print queues 

Executes site-specific DCL commands In SYSHUTDWN.COM 

Stops user processes 

Removes installed Images 

Dismounts mounted volumes other than the system disk (and, if requested, spins down the 
volumes) 

Closes the operator's log file 

Writes en-or log entries to disk 

Causes the VMS paging mechanism to record on disk any file changes that have occurred 
in memory 

Writes a copy of physical memory to the dump file 

Shuts down secondary processors for multiprocessor systems 

Dismounts the system disk 



Automatic Reboot After Orderly Shutdown 

For automatic rebooting 

— Set the processor for auto-reboot (processor-dependent). 

— Answer "YES" to the automatic reboot question in the shutdown procedure. 
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Example 6-3: User View of Orderly System Shutdown 

Osername : JONES 
Password: 

Welcome to node SUPER 
$ 
$ SHOW DEFAULT 

WORKl: [JONES] 
$ 

SHUTDOWN message from user SYSTEM at _OPA0: 19:59:56 
SUPER will shut down in 10 minutes; back up AT 10:00. 
PREVENTATIVE MAINTENANCE 

$ SHOW DEFAULT 
WORKl: [JONES] 
$ 

SHUTDOWN message from user SYSTEM at _OPA0 : 20:05:18 

SUPER will shut down in 5 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 



SHUTDOWN message from user SYSTEM at _OPA0: 20:07:24 

SUPER will shut down in 3 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 



SHUTDOWN message from user SYSTEM at _OPA0 : 20:08:30 

SUPER will shut down in 2 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 



SHUTDOWN message from user SYSTEM at _OPA0: 20:09:39 

SUPER will shut down in 1 minutes; back up AT 10:00. Please log out. 

PREVENT AT I\'E MAINTENANCE 



SHUTDOWN message from user SYSTEM at _OPA0: 20:10:45 

SUPER will shut down in minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

S SHO 

(The system has logged out the user's process) 



Starting Up and Shutting Down the System 6- 21 



Emergency Shutdown with DCL Commands 

Use if orderly shutdown fails 
Use in emergency for speed 
For speed when no emergency exists, usually suffices to use orderly shutdown 

— Specify "0" as the number of minutes until shutdown 
Steps to follow: 

1 . Log In as SYSTEM (procedure requires CMKRNL privilege) 

2. Issue: $ run sys$ system :opccrash 

3. Wait until the following message is displayed on console temninai: 

SYSTEM SHUTDOWN COMPLETE — USE CONSOLE TO HALT THE SYSTEM 

4. Use the console terminal to type: 

a. CTRL7P 

b. »>H 
Functions of OPCCRASH 

— Writes error log entries to disk 

— Causes the VMS paging mechanism to record on disl^ any file changes that have 
occurred In memory 

— Writes a copy of physical memory to the dump file 

— Dismounts the system disl< 
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Forcing a Shutdown with CCL Commands 

Use if no system response to interactive terminal input 

Console terminal only 

Functions 

— Writes crash dump file 

— Displays register contents on console terminal 

Automatic Reboot After Forcing a Sliutdown 

For automatic rebooting 

— Set the processor for auto-reboot (processor-dependent) 
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SUMMARY 

System is started in phases 

Console system exercises control over ttie remainder of the system 

— A fundamental component of startup activities 

— Console configuration and commands vary depending on processor type 

— Console commands are issued on the console terminal 

At boot time (conversational boot) 
While VMS is running 

— Used to change default system parameters 

Default system device 
Other system parameters 

Use standalone SYSBOOT utility to change system parameters 

• Three types of system shutdown situations 

— Orderly shutdown 

Prefen^d method 

Wams users of impending shutdown 

Preserves all system and user data 

— Emergency shutdown from DCL 

— Emergency shutdown from CCL 

• Automatic restart 

— Selected by front panel switches or system parameter 

— Complete recovery can be achieved with battery bacitup hardware 
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APPENDIX A 

This appendix contains processor-specific information and exampies of terminal output, 
specificaily for: 

• VAX-1 1/730 

• VAX-1 1/750 

• VAX-1 1/780 

Information on otiier processors can be found in the VMS Installation and Operation Guide for 
the particular processor. 
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Table 6-6: VAX Front Panel Switches 



Function 



VAX-1 1/780 



Turns power 
on and off. 
Enables and 
disables con- 
sole terminal 
and remote 
diagnosis 
port. 

Affects re- 
covery from 
system fail- 
ure. 

Requests 
system initial- 
ization 

Selects sys- 
tem device 
at system 
startup and 
automatic 
restart. 



Key switcfi 



AUTORESTART 



BCXDT 



Not done by switcli 
for tills processor 



Switch 



VAX-1 1/750 



Key switch 



POWER ON AC- 
TIONt 



INITIALIZE 



BOOT DEVICE 



VAX-1 1/730 



Key switch 



AUTORESTART/BOOT 



AUTORESTART/BOOT 



Not done by switch for this 
processor 



t Action taken on lecoveiy is a clioice of foar, lead counterclodcwise from the top of the switch: BOOT, 
RESTART/BOOT, HALT, RESTAKT/HALT. 



Table 6-7: VAX Front Panel Lights 



Function When Lit 



VAX-1 1/780 



Processor is not mnning. 
(May indicate a problem.) 

Processor is running. 

Processor is powered on. 
(Not lit when i<ey switch is in 
the OFF position.) 

Remote diagnosis operation 
Is in progress. 



ATTN (red) 

RUN (green) 
POWER (green) 

REMOTE (red) 



Panel Light 



VAX-1 1/750 



ERROR (red) 

RUN (green) 
POWER (green) 

See notet 



VAX-1 1/730 



RUN (red) 
DC ON (red) 

R/D (red) 



tFor the VAX-1 1/750, remote diagnosis is indicated by the lighting of one or more labels to the left of the lights 
mentioned in this table. Figure 6-3 shows these blocic letter labels. 
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Figure 6-3: VAX Console Control Panels 
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Table 6-8: VAX Console Devices 



Processor 



Console Device 



Location 



Device 



VAX-1 1/780 

VAX-1 1/750 
VAX-1 1/730 



RX01 diskette drive 



TU58 cartridge tape drive 

Dual TU58 cartridge tape 
drive 



Inside right door of processor 
cabinet, at bottom. Pivots out for 
access. 

On console front panel. 

On console front panel. 

On one type of VAX-1 1/730 
processor, the second drive is 
inside the processor cabinet. You 
must slide the processor out of 
the cabinet to reach It 

On the other type of VAX-1 1/730 
processor, the second drive is 
located on the console front panel 
next to the first drive. 

Both types of processors boot 
from the second console drive by 
default. 



CSA1: 

CSA1: 
CSA1: 

CSA2: 
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Table 6-9: Starting Up a 


VMS System from Power Off Using the Default System Device 








VAX-11/750 




Step 


VAX-1 1/780 


VAX-11/750 


(using BOOT58) 


VAX-1 1/730 


1 


Set AUTORESTART 


Set POWER ON AC- 


Set POWER ON AC- 


Set AUTORESTART/ 




switch to OFF. Place 


TION switch to HALT. 


TION switch to HALT. 


BOOT switch to OFF 




console voltime in 


Set BOOT DEVICE 


Place console volume 


Place the console volume 




console device. 


switch to default setting 
for system device (B, 
C, or D). The default 
setting is nomially D, 
but this depends on your 
configuration. 


in console device. Set 
BOOT DEVICE switch 
to setting for console 
device, A. 


in the console dcvice-f 


2 


Set key switch from 


Set key switch frwn 


Set key switch from 


Set key switch from OFF 




OFF to LOCAL. 


OFF to LOCAL. 


OFF to LOCAL. 


to LOCAL. 


3 


When the »> prompt 


When the >» prompt 


When the >» prompt 


When the »> prompt 




appears on console 


appears on console 


spears on console 


appears on console 




tenninal, toggle BOOT 


tenninal, set POWER 


tenninal, set POWER 


tenninal, toggle AU- 




switch firom OFF to ON. 


ON ACTION switch to 


ON ACnON switch 


TORESTART/BOOT 






BOOT. Press INTITAL- 


to BOOT. Press INI- 


switch from OFF to 






IZE button. 


TIALIZE button. When 


BOOT. 



Set key switch frcan 
LOCAL to LOCAL 
DISABLE. Set AU- 
TORESTART switch to 
ON. 



Set key switch from LO- 
CAL to SECURE. Set 
POWER ON ACTION 
switch to RESTART/ 
BOOT. 



the BOOT58> prompt 
appears, tjrpe BOOT 
RETURN. 

Set key switch from 
LOCAL to SECURE. 
Set BOOT DEVICE 
switch to default setting 
for system device (B, C, 
or D), and set POWER 
ON ACTION switch to 
RESTART/BOOT. 



Set key switch from 
LOCAL to LOC DSBL. 
(AUTORESTART/BOOT 

switch is set to ON.) 



tPor one type of VAX-11/730, the console volume (CSA2:) is always loaded in the console drive located inside 
the processor cabinet. You do not have to load the console volume on this type of processor. 
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Example 6-4: Default Startup of a VAX-11/780 from Power Off 

CPU HALTED, SOMM CLE AR, STEP-NONE , CLOCK=NORM 
RAD=HEX, ADD=PHYS, DAT=LONG, FILL=00, REL-00000000 
INIT SEQ DONE 
HALTED AT 000000 

(KEL0ADIN6 WCS) 

LOAD DONE, 0800 MICROWORDS LOADED 
VER: PCS=01 WCS=OE-10 FPLA-OE CON=V07-00-L 

** >» 

CPU HALTED 
INIT SEQ DONE 
HALT INST EXECUTED 
HALTED AT 200034F9 

6 OOOOOOOOE 00000200 

LOAD DONE, 00005000 BYTES LOADED 

VAX/VMS Version X2M9 3-J0H-1984 08:31 

%%%%%%%%%%% OPCOM 24-JUL-1984 18:36:03 %%%%%%%%%%% 
Logfile has been initialized by operator _OPAO: 
Logfilo is SYS$SYSROOT: [SYSMGR]OPERATOR.LOG;9 

%SET-I-INTSET, login interactive limit = 64, current interactive value - 
SYSTEM job terminated at 24-JDL-1984 18:36:40.72 



Example 6-5: Default Startup of a VAX-11/750 Using the Default System Disk from Power 
Off 

%% 

00000000 16 
** >» 

%% 

VAX/VMS Version Z2M9 ll-JOL-1984 08:31 

%%%%%%%%%%% OPCOM 24-JUL-19e4 18:32:34.36 %%%%%%%%%%% 
Logfile has been initialized by operator _OPAO: 
Logfile is SYS$SYSROOT: [SYSMGRJ0PERAT0R.LOG; 2 

%SET-I-INTSET, login interactive limit = 50, current interactive value = 
SYSTEM job terminated at 23-JUL-1984 18:36:53.85 
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Example 6-6: Default Startup of a VAX-11/730 from Power Off 



** >» 



CONVOll 






?27 READ ERROR DDl 






VERSION 03.00 






»>ePOWER.CMD 






»>L/C CONSOLE. CPU 


! Version 


55 


»>L/C/S:0800 MMIE.CPO 


! Version 


55 


»>L/C/S:OEOO POWER. CPU 


! Version 


55 


»>S/C OB 






»>W 






»>8CODE01.CMD 






>»L/C/S:0E00 FP.CPO 


! Version 


55 


»>L/C/S : lAOO BITFLD . CPU 


! Version 


55 


>»L/C/S!lDOO CM.CPD 


! Version 


55 


»>L/C/S:2200 BASIC. CPO 


! Version 


55 


>»L/C/S:3B00 QUEUE. CPO 


! Version 


55 


»>L/C/S!4000 IDC. CPO 


! Version 


55 


>»I 






»>eDD0 :DEFBOO.CMD 






»>I 






»>D/6/L 00A80O03 






»>D/G/L 1 3 






»>D/G/L 2 3FB86 






»>D/G/L 3 






>»D/G/L 4 






»>D/G/L 5 






»>E SP 






G OOOOOOOE 00000200 






»>L/P/S:@ VMB.EXE 






»>s e 







VAX/VMS Version X2LR 18-HAY-19e4 20:50 

PLEASE ENTER DATE AND TIME (DD-MMM-YYYY HH:MM) 07-JUL-1984 18:55 
%%%%%%%%%%% OPCOM 7-J0L-1984 18:55:59.65 %%%%%%%%%% 
Logfile has been initialized by operator _OPAO; 
Logfile is SYS$SYSROOT: (SYSHGR]OPERATOR.LO6;50 

%SET-I-INTSET, login interactive limit » 64, current interactive value ■• 

SYSTEM job terminated at 7-JUL-1984 18:57:40.34 
$ 
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Table 6-10: Starting Up a VMS System from Power On Using the Default System Device 



Step VAX-1 1/780 



VAX-1 1/750 



Set AUTORESTART 
switch to OFF. Place 
console volume in 
console device. 



Set key switch to 
LOCAL. 

Toggle BOOT switch 
ftom OFF to ON. If 
nothing happens at 
console tenninal, type 
CTRL/P. When >» 
prompt appears, type 
HALT RETURN. When 
>» prompt appears 
again, type BOOT 
RETURN. 

Set key switch from 
LOCAL to LOCAL 
DISABLE. Set AU- 
TORESTART switch to 
ON. 



Set POWER ON AC- 
TION switch to HALT. 
Set BOOT DEVICE 
switch to default setting 
for system device (B, 
C, or D). The default 
setting is normally D, 
but this depends on your 
configuration. 

Set key switch to 
LOCAL. 

Set POWER ON AC- 
TION switch to BOOT. 
Press DSirnALIZE 
button. 



Set key switch from LO- 
CAL to SECURE. Set 
POWER ON ACTION 
switch to RESTART/ 
BOOT. 



VAX-1 1/750 

(using BOOT58) 



VAX-1 1/730 



Set POWER ON AC- 
TION switch to HALT. 
Place console volume 
in console device. Set 
BOOT DEVICE switch 
to setting for console 
device, A. 



Set key switch to 
LOCAL. 

Set POWER ON AC- 
TION switch to BOOT. 
Press INITIALIZE 
button. When the 
BOOT58> prompt ap- 
pears, type: BOOT 
RETURN. 



Set key switch from 
LOCAL to SECURE. 
Set BOOT DEVICE 
switch to default setting 
for system device (B, C, 
or D) and set POWER 
ON ACTION switch to 
RESTART/BOOT. 



Set AUTORESTART/ 
BOOT switch to OFF. 
Place the console volume 
in the console device.t 



Set key switch to LOCAL. 



Toggle AUTORESTART/BOOT 
switch ftom OFF to 
BOOT. If nothing hap- 
pens at console tenninal, 
type CTRL/P. When »> 
prompt appears, type B 
RETURN. 



Set key switch from LO- 
CAL to LOC DSBL. Set 
AUTORESTART/BOOT 
switch to ON. 



tFor one type of VAX-11/730, the console volume (CSA2:) is always loaded in the console drive located inside 
the processor cabinet. You do not have to load the console volume on this type of processor. 
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Table 6-11: Automatic Powerfail Recovery 



Restart Response 
After Power Failure 



VAX-11/780 
AUTORESTART 
Switch Setting 



VAX-11/750 
POWER ON 
ACTION 
Switch Setting 



VAX-11/730 
AUTORESTART 
/BOOT 
Switch Setting 



If memory is valid, 
try to recover from 
system failure. Oth- 
erwise, perform fresh 
startup. 

If memory is valid, try 
to recover from sys- 
tem failure. Other- 
wise, halt processor. 

Halt processor 
Perform fresh startup 



ON 



RESTART/BOOT 



ON 



OFF 



RESTART/HALT 

HALT 
BOOT 



OFF 
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Table 6-12: Starting Up a VMS System, Explicitly Specifying the System Device 



VAX-1 1/780, 



VAX-11/750 



VAX-1 1/750 
(using BOOT58) 



VAX-1 1/730 



Step 1: Set AU- 
TORESTART switch to 
OFF. Place console volume 
in console device. 



Step 2: Set key switch to 
LOCAL. 

Step 3: If >» prompt is 
not displayed on console 
terminal, obtain it by 
typing CTRL/P. Type 
HALT RETURN. Then, 
type BOOT ddu RETURN, 
wheie ddu is the startup 
code for system device. 



Step 4: Set key switch 
from LOCAL to LO- 
CAL DISABLE. Set 
AUTORESTART switch to 
ON. 



Set POWER ON ACTION 
switch to HALT. 



Set POWER ON ACnON 
switch to HALT. Place 
console volume in console 
device. Set BOOT DE- 
VICE switch to setting for 
console device, A. 



Set AUTORESTART/ 
BOOT switch to OFF. Place 
the console volume in the 
console device.' 



Set key switch to LOCAL. Set key switch to LOCAL. Set key switch to LOCAL. 



If >» prompt is not 
displayed on console 
terminal, obtain it by 
typing CTRL/P. T^pe B 
ddcu RETURN, where 
ddcu is the startup code for 
the system device. (You 
must have the ROM for 
this device instaUed first.) 

Set key switch from LO- 
CAL to SECURE. Set 
BOOT DEVICE switch 
to default setting for 
system device (B, C, 
or D), and set POWER 
ON ACnON switch to 
RESTART/BOOT. 



Set POWER ON ACTION 
switch to BOOT. Press INI- 
TIALIZE button. When the 
BOOTS8> prompt spears 
on console terminal, type 
BOOT ddcu RETURN, 
where ddcu is the startup 
code for the system device. 

Set key switch from LO- 
CAL to SECURE. Set 
BOOT DEVICE switch 
to default setting for 
system device (B, C, 
or D), and set POWER 
ON ACTION switch to 
RESTART/BOOT. 



If >» prompt is not 
displayed on console 
terminal, obtain it by typing 
CTRL/R T^pe B ddu 
RETURN, where ddu is the 
startup code for the system 
device. 



Set key switch from LO- 
CAL to LOC DSBL. Set 
AUTORESTART/BOOT 
switch to ON. 



'For one type of VAX-11/730, the console volume (CSA2:) is always loaded in the console drive located inside 
the processor cabinet. You do not have to load the console volume on this type of processor. 
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Table 6-13: 


Device Codes Used at System Startup 






Device and 


VAX- 


-11/780 VAX-11/750 


VAX- 


-11/730 




Controller^ 


Support^ Support^ 


Support^ 


Device Code 


Unlbus 


RA60 


s 


s 


s 




DU 


RA80 


s 


s 


s 




DU 


RA81 


s 


s 


s 




DU 


RL02 




D 


D 




DL 


RK06 


D 








DM 


RK07 


S 


S 


D 




DM 


Massbus 


RP05 


S 








DB 


RP06 


S 


D 






DB 


RP07 


S 








DB 


RM03 


s 


s 






DB 


RM05 


s 


s 






DB 


RM80 


s 


s 






DB 


IDC 


RL02 






s 




DQ 


R80 






s 




DQ 


Console device 


RXOl 


D 








CS 


TU58 




D 


D 




CS* 



' Letter codes: 

S = device supported as system device or data device. 
D = device supported as data device. 

^ For VAX-11/780, VAX-11/730: the full device code format isddu, where dd is the device code and u is the unit 
number. 

' For the VAX-1 1/750, the full device code format is ddcu, where dd is the code in the above table, c is the 
channel letter, and u is the unit number. The channel letter, which is hardware dependent, is usually A. 

* On VAX-11/750: specify CS when using BOOT58; otherwise, specify DD when using CCL. 
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Example 6-7: Startup of a VAX-11/780 Specifying an RM05 as System Device from 
Power On 

»>BOOT DBO 

CPU HALTED 
INIT SEQ DONE 
HALT INST EXECUTED 
HALTED AT 20003552 

G OOOOOOOE 00000200 

LOAD DONE, 00005000 BYTES LOADED 

VAX/VMS Version X2M9 3-JON-1984 08:31 

%%%%%%%%%%% OPCOM 23-J0N-1984 08:38:22.82 %%%%%%%%%%% 
Logflle has been initialized by operator _OPA0 : 
Logfile is SYS$SySROOT: [SYSMGR10PERAT0R.LOG; 9 

%M00NT-I-M0aNTED, BIG_BIRD mounted on _DRA1: 

%MO0NT-I-M0UNTED, BERT mounted on _DRA2: 

%MOUNT-I-M0UNTED, ERNIE mounted on _DRA3: 

Job STARTNET (queue SYS$BATCH, entry 1166) started on SYS$BATCH 

%RON-S-PROC_ID, identification of created process is 00000089 

%%%%%%%%%%% OPCOM 23-JON-1984 08:39:33.82 %%%%%%%%%%% 

Message from user SYSTEM 

VAXsim El. 4 startup - Using SYS$SYSROOT: [SYSERR] VAXSIMDAT.DAT; 1 

Reply received from user SYSTEM at Batch 08:39:42 

— Ready for use . 

%SET-I-INTSET, login interactive limit = 64, current interactive value = 
%%%%%%%%%%% OPCOM 23-JUN-1984 08:39:48.60 %%%%%%%%%%% 
Message from user DECHET 
DECnet starting 

SYSTEM job terminated at 23-JUN-1984 08:39:48.90 

Example 6-8: Startup of a VAX-11/750 Specifying an RIMOS as System Device from 
Power On 

»>B DBAO 

%% 

VAX/VMS Version X2M9 3-JUN-1984 08:31 

%%%%%%%%%%% OPCOM 23-JUN-1984 09:28:33.96 %%%%%%%%%%%%%% 
Logfile has been initialized by operator _MOTHER$OPA0 : 
Logfile is SYS$SYSROOT: [SYSMGRJ0PERAT0R.LOG; 32 

%MOUNT-I-MOUNTED,CSSEDISK mounted on _DRB1 : 

%RUN-S-PROC_ID, identification of created process is 00000048 

Job STARTNET (queue SYS$BATCH, entry 152) started on SYS$BATCH 

%SET-I-INTSET, login interactive limit = 50, current interactive value = 

Reply received on MOTHER from user SYSTEM at MOTHER Batch 09:30:12 
VAX-11/750 System initialized 

SYSTEM job terminated at 23-JUN-1984 09:30:12.52 
%%%%%%%%%%%% OPCOM 23-JUN-1984 09:30:34.07 %%%%%%%%%%%% 
Message from user DECNET on MOTHER 
DECnet starting 
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Example 6-9: Startup of a VAX-1 1/730 Specifying an RL02 as System Device from Power 
on 

»B DM0 

»>0DD1 : D , OBOO . CJ© 

>»I 

>»D/G 1 

»>D/G 1 3 

»>D/G 2 3FF20 

>»D/G 3 

>»D/G 4 

»>D/G 5 

»>E SP 

G OOOOOOOE 00000200 

»>L/P/S:e VMS. EXE 

»>se 

VAX/VMS Version X2M9 3-JON-1984 08:31 

%%%%%%%%%%% OPCOM 23-JUN-1984 09:21:10.93 %%%%%%%%%%% 
Logfile has been initialized by operator _OPA0: 
Logfile is SYS$SYSROOT: [SYSMGR]OPERATOR.IiOG;4 

%SE'r-I-INTSET, login interactive limit = 64, current interactive value = 
SYSTEM job terminated at 23-JTJN-1984 09:21:24/59 



Table 6-14: Typical Console Commands 



Command 
Function 



VAX-11/780 



VAX-11/750 



VAX-11/750 
(BOOT58) 



VAX-1 1/730 



Starting up VMS 
or a standalone 
utility or diagnos- 
tic 

Examining a 
processor reg- 
ister or memory 
location 

Placing data in 
a processor reg- 
ister or memory 
location 

Initializing state 
of VAX processor 

Executing com- 
mands in a file 

Reloading and 
restarting the 
console proces- 
sor 



BOOT 



EXAMINE 



DEPOSIT 



INITIALIZE 



B 



BOOT 



EXAMINE 



DEPOSIT 



B 



@fiie-spec — 



REBOOT 



@fi!e-spec 



@file-spec 



Starting Up and Shutting Down tlie System 6- 39 



Table 6-15: Issuing Console Commands While VMS is Running 


Command Func- 
tion 


VAX-11/780 CCL 


VAX-1 1/750 
CCL 


VAX-1 1/730 CCL 


Changing mode of 
console temilnal 
from program mode 
to console mode 


CTRI7P (does not CTRLyP (halts 
halt VAX processor) WAX. processor) 


CTRLyP (halts VAX 
processor) 


Changing mode of 
console temiinal 
from console mode 
to program mode 


SET TERMINAL 
PROGRAM 


C (restarts halted 
VAX processor) 


C (restarts halted VAX 
processor) 


Halting VAX proces- 
sor 


HALT 


CTRL/P 


CTRUP 


Restarting halted 
VAX processor with- 
out taking console 
temiinai out of con- 
sole mode 


CONTINUE 


Not possible on 
this processor 


Not possible on this 
processor 




Table 6-16: Disabling the Use of Console IMode 


Function of Key 
Switch Setting 


VAX-11/780 


VAX-1 1/750 


VAX-1 1/730 


Enables CTRL/P 


LOCAL 


LOCAL 


LOCAL 


Disables CTRUP 


LOCAL DISABLE 


SECURE 


LOC DSBL 




Table 6-17: CCL Command Files Used at 


Startup 




Device Code Used 
at System Startup 
(See Table 6-13) 




Command Files on Console Volume 
Executed by BOOT Command 


DB (11/750 and 11/780 only) 
DM (11/750 and 11/780 only) 
DQ (11/730 only) 


DBnBOO.CMD (n = 0,1 7AB) 

DMnBOO.CMD (n = 0,1,2,3AB,) 
DQnBOO.CMD (n = 0,1,2,3) 


DU (11/780 and 11/730 only) 


DU0BOO.CMD 




CS 




GS1B00.CMD 
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Example 6-10: File DB0BOO.CMD from a VAX-11/780 Console Volume 

$ 0syS$OPDATE:DXCOPY 

Command file to copy files to/from the system 
console storage medium and the current directory. 

Is system console storage medium mounted (Y/N)?: N 

Please place the system console medium in the console drive 

when ready: 



RETURN 



and type 

%MODNT-I-M0UNTED, VAX console mounted on _CSA1: 

Copy from console medium (Y/N) ? : Y 

Enter console file name: DBOBOO.OID 

%EXCHANGE-S-MOUNTED, th RT-ll volume CSAl: 



has been mounted 



%EXCHftNGE-S-COPIED, _CSA1 : DBOBOO . CMD copied to SYS$SYSROOT: [SYSMGR]DB0B00.CMD;3, 

20 records 
%MO0NT-I-M0ONTED, VAX console mounted on _CSA1: 

$ 

$ TYPE SYS$MANAGER: DBOBOO. CMD 



! 

! DBO BOOT 


COMMAND 


FILE - DB0BOO.CMD 


1 

HALT 




HALT PROCESSOR 


ON JAM 




UNJAM SBI 


IN IT 




INIT PROCESSOR 


DEPOSIT/I 11 20003800 


SET UP SCBB 


DEPOSIT RO 




DISK PACK DEVICE TYPE 


DEPOSIT Rl 8 




MBA TR»8 


DEPOSIT R2 




ADAPTER UNIT = 


DEPOSIT R3 




CONTROT.T.ER DNIT = 


DEPOSIT R4 




BOOT BLOCK LBN (UNUSED) 


DEPOSIT R5 4000 




SOFTWARE BOOT FLAGS 


DEPOSIT FP 




SET NO MACHINE CHECK EXPECTED 


START 20003000 




1 START ROM PROGRAM 


WAIT DONE 




WAIT FOR COMPLETION 


EXAMINE SP 




SHOW ADDRESS OF WORKING MEMOR 


LOAD VMB. EXE/START :e 


LOAD PRIMARY BOOTSTRAP 


START e 




1 AND START IT 
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Example 6-11 : Customizing the Console Volume 

$ @SYS$UPDATE;SETDEFBOO 

Command file to set default boot command file. 

Please place the system console medium in the console drive. 

Is the console medium ready to be mounted? (Y/N) : Y 

%MODNT- I -MOUNTED, VAX console mounted on _CSA1: 

Enter name of default boot command file: DB0BOO.CMD 

%EXCHANGE-S-MOONTED, the RT-11 volume _CSA1 : has been mounted 
%EXCHftNGE-S-DELETEPREV, previous copy of _CSA1 : DEFBOO . CMD deleted 
%EXCHflNGE-S- COPIED, _CSA1 : DBOBOO. CMD copied to _CSA1 : DEFBOO. CMD , 2 blocks 

Default boot command file now replaced ith DB0BOO.CMD. 

Are you satisfied with this file as the default boot command file? (Y/N) : Y 

%MOONT- I -MOUNTED, VAX console mounted on _CSA1: 

$ DISMOUNT CSAl 

S 
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Example 6-12: File RESTAR.CMD from a VAX-11/780 Console Volume 



$ @SYS$OPDATE:DXCOPY 

Command file to copy files to/from the system 
console storage medium and the current directory. 

Is system console storage medium mounted (Y/N)?: N 

Please pl ace the system console medium on the console drive 

and type 



RETURN 



when ready: 
%M0ONT-I-M0ONTED, VAX console mounted on _CSA1 : 
Copy from console medium (Y/N) ? : Y 
Enter console file name: RESTAR.CMD 

%EXCHANGE-S-MOUNTED, the RT-11 volume _CSA1 : has been mounted 
%EXCHANGE-S-COPIED, _CSA1 : RESTAR . CMD copied to SYS$SYSROOT: [SYSMGRJRESTAR.CMD;!, 

20 records 
%MOONT-I-MOUNTED, VAX console mounted on _CSA1: 

$ 

$ TYPE RESTAR.CMD 

RESTART COMMAND FILE - RESTAR.CMD 

THIS COMMAND FILE IS INVOKED IN THE EVENT OF POWER RECOVERY AND 
OTHER CONSOLE DETECTED RESTART CONDITIONS IF THE AOTO RESTART SWITCH 
IS SET. IT CAN ALSO BE INVOKED MANUALLY WITH THE COMMAND: 

eRESTAR.CMD 



HALT 

DNJAM 

INIT 

DEPOSIT/I 11 20003800 

DEPOSIT RO 

DEPOSIT Rl 3 

DEPOSIT R2 

DEPOSIT R3 

DEPOSIT R4 

DEPOSIT R5 

DEPOSIT FP 

START 20003004 

$ 

$ DISMOUNT CSAl 

$ 



HALT PROCESSOR 

UNJAM SBI 

INITIALIZE PROCESSOR 

SET ADDRESS OF SCB BASE 

CLEAR UNUSED REGISTERS 

UBA TR=3 

CLEAR UNUSED REGISTER 

CLEAR UNUSED REGISTER 

CLEAR UNUSED REGISTER 

CLEAR UNUSED REGISTER 

NO MACHINE CHECK EXPECTED 

START RESTART REFEREE 
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Table 6-18: Starting Up a VMS Operating System Conversationally 



VAX-1 1/780 



VAX-1 1/750 



VAX-1 1/750 
(using BCX)T58) 



VAX-1 1/730 



Step 1 : Set AU- 
TORESTART 
switch to OFF. 
Place console vol- 
ume In console 
device. 

Step 2: Set key 
switch to LOCAL. 

Step 3: If >» 
prompt is not dis- 
played on console 
temfilnal, obtain It 
by typing CTRL/P. 
Type HALT RE- 
TURN. Then, type 
@dduGEN RE- 
TURN where ddu is 
the startup code for 
the system device. 

Step 4: Set i<ey 
switch from LO- 
CAL to LOCAL 
DISABLE. Set 
AUTORESTART 
switch to ON. 



Set POWER ON 
ACTION switch to 
HALT Set BOOT 
DEVICE switch to 
default setting for 
system device (B, 
C. or D). 

Set l<ey switch to 
LOCAL. 

If >» prompt is 
not displayed on 
console terminal, 
obtain it by typing 
CTRL/R Type B/1 
RETURN. 



Set l<ey switch 
from LOCAL to 
SECURE. Set 
POWER ON AC- 
TION switch to 
RESTART/BOOT 



Set POWER ON AC- 
TION switch to HALT 
Place console volume 
In console device. Set 
BOOT DEVICE switch 
to setting for console 
device, A. 

Set key switch to LO- 
CAL. 

Set POWER ON AC- 
TION switch to BOOT 
Press INITIALiZE 
button. When the 
BOOT58> prompt ap- 
pears on console ter- 
minal, type D/G 3 u 
RETURN, @ddcGEN 
RETURN, where ddcu 
Is the startup code for 
the system device. 

Set key switch from 
LOCAL to SECURE. 
Set BOOT DEVICE 
switch to default setting 
for system device (B, C, 
or D), and set POWER 
ON ACTION switch to 
RESTART/BOOT 



Set AUTORESTART/ 
BOOT switch to 
OFF. Place the con- 
sole volume in the 
console device.! 



Set key switch to 
LOCAL. 

If >» prompt Is not 
displayed on con- 
sole terminal, obtain 
it by typing CTRL/P. 
Type @dduGEN 
RETURN, where 
ddu is the startup 
code for the system 
device. 



Set key switch from 
LOCAL to LOC 
DSBL. Set AU- 
TORESTART/BOOT 
switch to ON. 



tFor one type of VAX-11/730, tfie console volume (CSA2:) is always loaded in the console drive located inside 
the processor cabinet. You do not have to load the console volume on this type of processor. 
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Example 6-13: Typical Conversational Startup 

>»eDBOGEN 

DBO CONVERSATIONAL BOOT COMMAND FILE - DBOGEN. 

BOOT FROM OBO AND STOP IN SYSBOOT TO ALTER PARAMETERS 



HALT 





CPU HALTED 




ON JAM 




! UN JAM SB I 


IN IT 




! INIT PROCESSOR 



INIT SEQ DONE 
DEPOSIT/I 11 20003800 

DEPOSIT RO 

DEPOSIT Rl 8 

DEPOSIT R2 

DEPOSIT R3 

DEPOSIT R4 

DEPOSIT R5 4001 

DEPOSIT FP 

START 20003000 

WAIT DONE 



HALT PROCESSOR 



SET DP SCBB 

DISK PACK DEVICE TYPE 

MBA TR»8 

ADAPTER UNIT = 

CONTROLLER UNIT = 

BOOT BLOCK LBN (OMUSED) 

SOFTWARE BOOT FLAGS (CONVERSATIONAL BOOT) 

SET NO MACHINE CHECK EXPECTED 

START ROM PROGRAM 

WAIT FOR COMPLETION 



HALT INST EXECUTED 
HALTED AT 20003552 



EXAMINE SP 



SHOW ADDRESS OF WORKING MEMORY -1-2X200 



6 OOOOOOOE 00000200 
LOAD VMB. EXE/START :e ! LOAD PRIMARY BOOTSTRAP 



START e 

<eEOF> 
<eEXIT> 



LOAD DONE, 00005000 BYTES LOADED 
! AND START IT 



SYSBOOT> USE ALTPARAM.PAR 

SYSBOOT> SET UAFALTERNATE 1 

SYSBOOT> SET/STARTUP SyS$ SYSTEM: ALT START 

SYSBOOT> CONTINUE 
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Example 6-13: Typical Conversational Startup (Cont.) 

VAX/VMS Version X2M9 3-JTJN-1984 08:31 

%%%%%%%%%%% OPCOM 26-JUN-1984 20:17:24.90 %%%%%%%%%%% 
Logfile has been initialized by operator _OPA0 : 
Logf ile is S YS$SYSROOT : [ SYSMGR] OPERATOR . LOG; 13 

%MOUNT- I -MOUNTED, BIG_BIRD mounted on _DRA1 : 

%M0ONT- I -MOUNTED, BERT mounted on _DRA2i 

%MOONT- I -MOUNTED, ERNIE mounted on _DRA3: 

%M0UNT-F-VOLINV, volume is not software enabled 

Job STARTNET (queue SYS$BATCH, entry 259) started on SYS$BATCH 

%RUN-S-PROC_ID, identification of created process is 0000008A 

%%%%%%%%%% OPCOM 26-JUN-1984 20:18:42.98 %%%%%%%%%%% 

Message from user SYSTEM 

VAXsim El. 4 startup - Using SYS$SYSROOT: [SYSERR] VAXSIMDAT.DAT; 1 

Reply received from user SYSTEM at Batch 20:18:52 
Proto 13 — THE SUPERSTITION — Ready for use. 

%SET-I-INTSET, login interactive limit = 64, current interactive value = 
SYSTEM job terminated at 26-JUN-1984 20:18:59.26 

%%%%%%%%%%% OPCOM 26-JUN-1984 20:19:05.73 %%%%%%%%%%% 
Message from user DECNET 
DECnet starting 
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Example 6-14: Performing an Orderly System Shutdown on a VAX-1 1/780 System 

Osername : SYSTEM 
Password: 

Welcome to VAX/VMS version V5.0 on node SUPER 
Last interactive login on Saturday, 23-JUN-1988 08:20 
Last non- interactive login on Saturday, 23-JUN-1988 01:24 

You have 7 new Mail messages . 

$ @SYS$SYSTEM: SHUTDOWN 

SHUTDOWN — Perform an Orderly System Shutdown 

How many minutes until final shutdown [0] : 10 

Reason for shutdown [Standalone]: PREVENTATIVE MAINTENANCE 

Do you want to spin down the disk volumes [NO]? YES 

Do you want to invoke the site-specific shutdown procedure [YES] ? YES 

Should an automatic system reboot be performed [NO] ? NO 

When will the system be rebooted [later]; AT 10:00 

Shutdown options (enter as a comma-separated list) : 

SAVE_FEEDBACK Saves feedback data for AUTOGEN calculations 

REMOVE_NODE Remaining nodes in the cluster should adjust quorum 

CLUSTER_SHUTDOWN Entire cluster is shutting down 

REBOOT_CHECK Check existence of basic system files 
Shutdown options [NONE] : NONE 

SHUTDOWN message from user SYSTEM at _OPA0: 08:23:36 
SUPER will shut down in 10 minutes; back up AT 10:00. 
PREVENTATIVE MAINTENANCE 

44 terminals have been notified. 

%SHOTDOWN- I -OPERATOR, This terminal is now an operator's console. 

%%%%%%%%%%% OPCOM 23-JUN-1988 08:28:44.11 %%%%%%%%%%% 

Operator status for operator _OPA0 : 

CENTRAL, PRINTER, TAPES, DISKS, DEVICES, CARDS, NETWORK, CLUSTER, SECURITY, 

REPLY, SOFTWARE, OPERl, 0PER2, 0PER3, 0PER4, 0PER5, 0PER6, 0PER7, 0PER8, 0PER9, 

OPERIO, OPERll, OPER12 

%SHUTDOWN-I-DISLOGINS, Interactive logins will now be disabled. 
%SET-I-INTSET, login interactive limit = 0, current interactive value «= 3 
%SHUTDOWN-I-SHUTNET, The DECnet network willn ow be shut down. 

SHUTDOWN message from user SYSTEM at _OPA0: 08:29:03 

SUPER will shut down in 5 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

3 terminals have been notified. 

SHUTDOWN message from user SYSTEM at _OPA0: 08:31:09 

SUPER will shut down in 2 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

3 terminals have been notified. 
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Example 6-14: Performing an Orderly System Shutdown on a VAX-11/780 System (Cont.) 

SHUTDOWN message from user SYSTEM at _OPA0: 08:00:00 

SUPER will shut down in 2 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

3 terminals have been notified. 

%SHOTDOWN-I-STOPQOEMAN, The queue manager will now be stopped. 

SHUTDOWN message from user SYSTEM at _OPA0: 08:01:00 

SUPER will shut down in 1 minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

3 terminals have been notified. 

SHUTDOWN message from user SYSTEM at _OPA0: 08:02:00 

SUPER will shut down in minutes; back up AT 10:00. Please log out. 

PREVENTATIVE MAINTENANCE 

3 terminals have been notified. 

%SH0TDOWN-I=SITESHUT, The site-specific shutdown procedure will now be invoked. 

%SHOTDOWN-I-STOPUSER, All user processes will now be stopped. 

%SHDTDOWN- I -REMOVE, All installed images willnow be removed. 

%%%%%%%%%%% OPCOM 23-JUN-1988 08:34:44.22 %%%%%%%%%%% 

Message from user DECNET 

DECnet shutting down 

%SHUTDOWN-I-DISMOUNT, All volumes will now be dismounted. 
%SHUTDOWN-I-DISMOUNTDEV, Dismounting device _DRA1:. 
%SHUTD0WN-I-DISMOUNTDEV, Dismounting device _DRA2:. 
%SHOTDOWN-I-DISMOUNTDEV, Dismounting device _DRA3:. 
%%%%%%%%%%% OPCOM 23-JUN-1988 08:35:03.13 %%%%%%%%%%% 
Message from user SYSTEM 
_OPA0:, SUPER shutdown was requested by the operator. 

%%%%%%%%%% OPCOM 23-JUN-1988 08:35:03.69 %%%%%%%%%%% 

Logf ile was closed by operator _OPA0 : 

Logfile was SYSSSYSROOT: [SYSMGR]OPERATOR.LOG;8 

%%%%%%%%%%% OPCOM 23-JUN-1988 08:35:03.82 %%%%%%%%%%% 
Operator _OPA0 : has been disabled, username SYSTEM 

SYSTEM SHUTDOWN COMPLETE - USE CONSOLE TO HALT SYSTEM 

>»H 

HALTED AT 80008CE8 
»> 
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Table 6-19: Forcing a Shutdown Using CCL Commands 



VAX-1 1/780 VAX-1 1/750 VAX-1 1/730 

CTRL/P CTRL/P CTRL/P 

>»HALT >»E/G F »>eCRASH 

»>eCRASH >»E P 

»>E/I 

>»E/I 1 

»>E/I 2 

»>E/I 3 

»>E/I 4 

»>D/6 F FFFFFFFF 

»>D P IFOOOO 

>»C 
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MODULE 7 

INSTALLING AND UPDATING 
SYSTEM SOFTWARE 
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INTRODUCTION 

The system manager of a VMS system must install and customize the software on the system 
before users can log In and work. This module focuses on the skills needed to install, upgrade, 
and add maintenance updates or optional software to your VMS system. Software installation, 
whether you are Installing the operating system or an optional product, involves two basic steps: 

Registering a Product Authorization Key (PAK). This key represents your software license 
and allows the software to run. 

Installing the software itself. This means copying the software from a distribution volume 
onto the system disk. 

After you install the operating system, customize it using the skills discussed in the other 
modules in this course. Finally, you should run the User Environment Test Package (UETP) 
and make fc>ackup copies of your system disk and console volume. 

OBJECTIVES 

Use the License Management Facility to manage the software license database 

Install VMS system software 

Upgrade VMS system software 

Install optional software and maintenance updates 

Customize and save the contents of the system volume and the console volume 

Run the User Environment Test Package (UETP) to test the hardware and the software 



RESOURCES 

1 . VMS Installation and Operations manual for each processor 

2. VMS Release Notes for latest version of the operating system 

3. VMS License Management Utility Manual 
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MANAGING PRODUCT LICENSES USING THE 
LICENSE MANAGEMENT FACILITY (LMF) 

Overview of the LMF 

Most DIGITAL products now require a license key to be installed in order to operate VMS 
V5.0 and later systems. You install the key by copying Information from a paper Product 
Authorization Key (PAK). 

These product keys are entered into a cluster-wide database. 

As each node is started up, licenses are loaded into a volatile LMF database in memory. 

Products on any node in the cluster check the volatile database to determine whether a 
particular use of the product is licensed or not. 

There are two basic types of licenses: 

— Availability License: Allows the use of a product on a host 

— Activity License: Allows a specific number of concurrent users to access a product. 
It is also possible to combine the two licenses: 

— Compound License: Requires a host license and further licenses for each concurrent 
user. 

Products can also be grouped together under a single license so that a single key will 
enable the use of several products. 
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LMF Features and Benefits 

Managed by the manipulation of license keys 

Ability to INCLUDE or EXCLUDE nodes for subcluster licensing 

Administration and tracking 

Concunent user licensing distributed over the cluster 

Centralized license management 

Allows generous copying; focuses on use 

Spans the VAX family 

Aikjws combination of license keys 

Supports possible future technologies such as distribution of software and documentation 
on CD-ROM 
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Components of the LMF 



License Unit Requirements Tables (LURT) 

— LURTs contain the number of units required for each VAX model number. 

— The LURTs are specified by a letter table code in the PAK in either the availability field, 
activity field, or both. 

The Ucense Management utility 

Format: 

$ LICENSE subcommand parameter 

The License Management utility (LICENSE) is a DCL-level Interface to the License 
Management Facility (LMF) on the VMS operating system. 

The LICENSE database 

— SYS$COMMON:[SYSEXE]LMF$LICENSE.LDB is the default location. 

— if there is more than one system disk in the cluster, logical name LMF$LICENSE should 
point to a single database for the cluster containing all product licenses for all cluster 
hosts. 

— If there is no disk accessible to all hosts, separate databases should be maintained 
identically (see VMS License Management Utility Manual}. 

— The LICENSE database is where all key information is kept. The database is managed 
by the LICENSE utility. 

SYS$UPDATE:VMSLICENSE.COM 

— A command procedure to assist you in registering your keys in the LICENSE database. 
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License Units and License Unit Requirement Tables 
License Unit 

• Basic element by which DIGITAL specifies how much product use a license authorizes. 

Each license key specifies the number of units purchased with the conespondlng license. 

Each processor has a series of license unit requirements, with higher performance 
processors requiring more license units. 

Products query the LMF to detemnine if there are sufficient units available to activate the 
product. If the number of units available are greater or equal to the units required, then the 
product may be used. 

License Unit Requirement Tables (LURTs) 

LURTs are lists of the unit requirements for each supported processor for particular types 
of products. 

A LURT for availability licenses specifies the number of units required to load a prtxiuct's 
license key on a specific VAX system for unlimited use. 

Example: Unlimited use of a product RETRIEVE on a VAX 6230 might require 1 500 license 
units, while unlimited use of RETRIEVE on a MicroVAX II might require only 200 units. 

A LURT for activity licenses specifies the number of units required for each concurrent user 
on a specific VAX system model using the product. 

— The user can be anywhere in the cluster. 

— Different hosts in the cluster might require different numbers of units per user. 

— As each user activates the product, the number of available units decreases according 
to the processor they are accessing the product from. 

— If there is not enough available units for another user on a particular host, that user 
gets an error message. 

— When a user stops using the product, the units they were using again become available. 

— Activity licenses are useful when you expect to use a product infrequently and by a 
small number of users on a large machine. 

— Additional activity licenses can be purchased to add more users. 

— Products licensed by activity licenses can also be licensed by availability licenses at 
your discretion if product usage increases beyond the point where an activity license is 
cost effective. 
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Table 7-1 : Values for an Activity License LURT 



Number of license units 
VAX Model required per user 



VAX 8650 75 

VAX 8350 60 

VAXstation 2000 30 



Product Usage with Activity License in Cluster 

A product QUERY has an activity license for 1000 units in a cluster consisting of a VAX 8650, 
VAX 8350, and three VAXstation 2000 systems. For this discussion, the activity license LURT 
will have values as shown above. 

As each user anywhere in the cluster accesses QUERY, the number of units required per user 
by that host will be subtracted from the number of units available to all other hosts in the cluster. 

If there were eight users on the VAX 8650, that would require 8x75=600 units. If there were 
five users on the VAX 8350 at the same time, that would require an additional 5x60=300 units. 
This leaves only 100 units. This would allow each of the three VAXstation 2000s to have one 
user of QUERY, that would require 3x1 x30=90 units. The next user anywhere in the cluster 
would receive an error message because the 10 units remaining are not enough for any users. 

Note that the three VAXstation 2000 users could not all have accessed QUERY from either the 
VAX 8650 or the VAX 8350. With 1 00 units remaining, only one additional user could have 
used the product from either VAX system. 
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LICENSE UTILITY 



LICENSE Subcommand Overview 



Table 7-2: LICENSE Subcommands 



Command 



Definition 



AMEND 
CANCEL 

CREATE 
DISABLE 
ENABLE 

ISSUE 

LIST 

LOAD 

MODIFY 

REGISTER 
START 

UNLOAD 



Changes a license currently in the LICENSE database. 

Specifies a new tennination date for a product currently in the LICENSE 
database. 

Creates a LICENSE database with no license records. 

Disables an existing license in the LICENSE database. 

Enables an existing license in the LICENSE database so it can be 
activated with the LICENSE LOAD command. 

Produces a replica of a PAK that is sent to a file or displayed on 
your terminal (the default). This command disables the license in the 
database. 

Displays information from the LICENSE database about the specified 
license or licenses. 

Activates a license or licenses making them available for product 
authorization for the current node. 

Modifies a license for system management and license sharing 
purposes. 

Adds a new license to the LICENSE database. 

Sets up an in-memory table for your system, and activates all licenses 
that are registered and enabled In the LICENSE database. 

Deactivates a license, making the product unavailable from the cun-ent 
node. 
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AMEND 

Changes a license cun-ently in thie LICENSE database. 

Use the LICENSE AMEND command only when the software vendor provides amendment 
infonnation. (Currently, DIGITAL does not issue amendments to licenses.) 

Fomiat: LICENSE AMEND product-name 
Example: 

$ LICENSE AMEND GIZMO /PRODDCER=DEC /ISSOER=DEC - 

_$ /AOTHORIZATION=USA4321 - 

_$ /CHECKSUM=1-GEAD-00DA-HIDN-PLAC /VERSION=9.3 

This command amends the license for the DIGITAL software product named GIZMO. Entering 
this command upgrades an existing GIZMO license to Version 9.3. The producer name, issuer 
name, authorization number, and checksum number are typed exactly as they appear in the 
amendment information. 



CANCEL 

Specifies a new termination date for a product currently in the LICENSE database. 
You must use the /TERMINATION=date qualifier. 

Fomiat: LICENSE CANCEL rrERMINATION=date product-name 

Example: 

$ LICENSE CANCEL/AOTHORIZATION=USA1776 - 
_$ /TERMINATION=04-JUL-1989 VAX-VMS 

Unless an earlier tennination date exists, this command sets a new cancellation date of July 4, 
1989 for the license on VMS. 

Note that the product name is entered with a hyphen (-) character as it was specified on the 
PAK. 
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CREATE 

Creates a LICENSE database with no license records. LMF creates a default LICENSE 
database in SYS$COMMON:[SYSEXE]LMF$LICENSE.LDB. Therefore, you need not specify 
this command. 

Format: LICENSE CREATE 

Example: 

$ LICENSE CREATE/DATABASE=SYS$MANAGER:LMF$LICENSE.LDB 



DISABLE 

Disables an existing license in the LICENSE database. A disabled license cannot be activated 
to authorize product use. The LICENSE DISABLE command does not immediately affect 
any active processes. Active processes are affected only If you enter a LICENSE UNLOAD 
command or if the system shuts down. 

Format: LICENSE DISABLE product-name 

Example: 

$ LICENSE DISABLE VAXset /PRODUCER=DEC 

This command disables the license for VAXset, produced by Digital Equipment Corporation 
(DEC). Because no database is specified, LMF uses the default database. 



ENABLE 

Enables an existing license in the LICENSE database so that it can be activated with the 
LICENSE LOAD command. This command cancels the effect of the LICENSE DISABLE 
command. Newly registered licenses are enabled by default. 

Format: LICENSE ENABLE product-name 

Example: 

$ LICENSE ENABLE VAXSET /PRODUCER=DEC 
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ISSUE 

Produces a replica of a PAK that is sent to a file or dispiayed on your terminal (the default). If 
the terms and conditions of your license contract allow it, you can then enter this PAK replica in 
the LICENSE database of another processor. When you enter a LICENSE ISSUE command, 
LMF disables the license in the current LICENSE database and marks the license ISSUED. To 
enable a license that has been marked ISSUED, enter the LICENSE ENABLE command. 

Format: LICENSE ISSUE product-name 

Example: 

S LICENSE ISSUE /OUTPUT=SYS$MANAGER: FORTRAN. PAK - 
S /PRODDCER=DEC FORTRAN 



LIST 

Displays information from the LICENSE database about the specified license or licenses. You 
can control the form, content, and location of information displayed with the /BRIEF, /FULL, 
/HISTORY, and /OUTPUT qualifiers. 

Fomiat: LICENSE LIST [product-name] 

Example 

$ LICENSE LIST 

Press return to exit, use arrow keys to scroll. 

Product Name: Producer 



FORTRAN DEC 

COBOL DEC 

PASCAL DEC 
[End of List] 



History records are written by every command that changes any fields in a license record. 
These commands are AMEND, CANCEL, ENABLE, DISABLE, ISSUE, and MODIFY. 
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Example 7-1: $ LICENSBLIST/FULL/HiSTORY Output 



$ LICENSE LIST /FULL /HISTORY FORTRAN 

Press return to exit, use arrow keys to scroll. 



License Management Facility 

LICENSE database File: 
Created on : 
Created by user: 
LMF Version: 



ART: :SYS$COMMON: [SYSEXE]I.MF$LICENSE.LDB 

17-AOG-1988 

MONET 

VI. 



Issuer: 

Authorization: 
Product Name: 
Producer : 
Units : 
Date: 
Version: 

Termination Date: 
Availability: 
Activity : 
Options ; 
Hardware lO: 

Revision Level: 
Status : 
Command : 

Modified by user: 
Modified on: 
Include : 



Issuer; 

Authori z at ion : 
Product Name: 
Producer : 
Units : 

Modified Units: 
Date: 
Version: 

Termination Date: 
Availability ; 
Activity: 
Options: 
Hardware ID : 

Revision Level: 
Status : 
Command: 

Modified by user: 
Modified on: 
[End of List] 



DEC 

USA- 2 4 68 
FORTRAN 
DEC 
2000 
(none) 
V4.7 

lO-DEC-1990 
F (Layered Products) 



2 

Active 

AMEND 

DEGAS 

19-AUG-1989 14:32:23.41 

ART 



DEC 

USA-2468 
FORTRAN 
DEC 
2000 
9999 
(none) 
V4.5 

20-AUG-1989 
F (Layered Products) 

MOD UNITS 



History 
AMEND 
DEGAS 
29-AUG-1988 



12:12:27.33 
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LOAD 

Activates a license or licenses making them available for product authorization for the current 
node. The product license or licenses must currently exist and be active in the LICENSE 
database. If the license is already loaded, the LMF retums an error message and makes no 
changes. 

To use this command you need the privileges to change mode to kernel (CMKRNL), to create 
system logical names (SYSNAM), and system privileges (SYSPRV). 

Format: LICENSE LOAD [product-name] 

Example: 

$ LICENSE UNLOAD FORTRAN 

$ LICENSE MODIFY/INCLDDE=MaSIC FORTRAN 

$ LICENSE LOAD FORTRAN 

Whenever a load is successful, the utility displays a message showing the number of license 
units loaded. You can also use the DCL command SHOW LICENSE to see what licenses are 
loaded. 



MODIFY 

Modifies a license for system management and license-sharing purposes. The LICENSE 
MODIFY command changes data in the LICENSE database immediately, but the modifications 
do not affect a running system until you activate the modified license with a LICENSE LOAD 
command. 

Before using this command, refer to your software license agreement to determine whether the 
modifications you want to make are valid under the terms of the license. 

Format: LICENSE MODIFY product-name 

Example: 

$ LICENSE MODIFY /EXCLDDE= (DANCE, THEATR) - 

_$ /COMMENT="Modified to exclude nodes DANCE & THEATR 10/23/89" - 
$ FORTRAN 



Installing and Updating System Software 7-15 



REGISTER 

Adds a new license to the LICENSE database. A Product Authorization Key (PAK) provides the 
product name and Information you need to register the license. You must enter all Information 
provided by your PAK exactly as specified. 

Often the command procedure SYS$UPDATE:VMSLICENSE.COM is used to register a new 
product license. This provides a prompt-based interface to the LICENSE REGISTER command. 

Format: LICENSE REGISTER product-name 

Example: 

$ LICENSE REGISTER FORTRAN /ISSDER=DEC /AOTHORIZATION-USA-10 - 

_$ /PRODUCER=DEC /UNITS=400 /VERSION=4.6 - 

_$ /AVAILABILITY=F /CHECKSDM=1-HIDN-INDA-C0MP-DAHH 

$ LICENSE REGISTER DVNETRT6 /ISSUER=DEC - 

_$ /AOTHORIZAT ION-USA- 15 - 

_$ /PRODUCER=DEC /UNITS-1000 /VERSION=4.0 - 

$ /AVAILABILITY=E /CHECKS0M=1-C00D-AG0N-EFIC-HING 



START 

Sets up the License Unit Requirement Table (LURT) for your system, and activates all licenses 
that are registered and enabled in the LICENSE database. Because the VMS operating system 
issues a LICENSE START command during system startup, you should need this command 
only if startup fails. 

To use this command, you need the privileges to change mode to kernel (CMKRNL), to create 
system logical names (SYSNAM), and system privileges (SYSPRV). 

Format: LICENSE START 

Example: 

$ LICENSE START 

This command sets up the LURT for your system and activates all the licenses that are 
registered and enabled in the LICENSE database. 
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UNLOAD 

Deactivates a license, maldng the product unavailable from the cun-ent node. The product 
license or licenses must be registered in the LICENSE database and must have been previously 
activated with an interactive or automatic LICENSE LOAD command. The LICENSE UNLOAD 
command has no effect on active processes. 

To use this command you need the privileges to change mode to kernel (CMKRNL), to create 
system logical names (SYSNAM), and system privileges (SYSPRV). 

Format: LICENSE UNLOAD product-name 

Example: 

$ LICENSE ONLOAD/PRODUCER=DEC FORTRAN 



Messages 

To ensure that LMF messages are displayed through the Operator's Communication Facility 
(OPCOM), you must define the logical name LMF$DISPLAY_OPCOM_MESSAGE as follows: 

$ DEFINE/EXEC/SYSTEM IiMF$DISPLAY OPCOM MESSAGE TRDE 
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Example 7-2: Product Authorization Key 



I I I I I I I I 

|d|i|g|i|t|a|l| 
I I I I I I I i 



LICENSE SOFTWARE PRODUCT 
PRODUCT AUTHORIZATION KEY 



I DOCUMENT ISSUE DATE | 
I 8-MAR-1988 | 



Digital Equipment Corporation 
Maynard, MA. 



LICENSE ADMINISTRATION LOCATION: 

Digital Equipment Corporation 
Maynard, Massachusetts 



ORDERED BY: Newton Scientific Inst. 
Mr. Isaac Newton 
128 Main St. 
Newton, MA 03300 



PAK ID: 

Issuer: DEC 
Authorization Number: USA000877 



PRODUCT ID: 



Product Name: FORTRAN 
Producer: DEC 



NUMBER OF UNITS: 

Number of units: 5000 

KEY LEVEL: 

Version : 5.0 
Product Release Date: 

KEY TERMINATION DATE: 

Key Termination Date: 

RATING: 

Availability Table Code: F 
Activity Table Code: 

MISCELLANEOUS : 

Key Options: MOD_UNITS 
Product Token: 
Hardware- Id: 

Checksum: 1-LDFA-PGEA-AIEA-ICAL 
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Example 7-3: VMSLICENSE Session 

$ SET DEFAULT SYS$UPDATE 
$ eVHSLICENSE.COM 

VMS License Management Utility Options: 

1 . Register a Product Authorization Key 

2. Amend an existing Product Authorization Key 

3 . Exit this procedure 

Select option: 1 

* Do you have your Product Authorization Key? Y 

When pronpted for input, enter data from corresponding fields on 
your Product Authorization Key (PAK) or Product Authorization 
Amendment (PAAM) . 

Some pron^ts display a default reply (shown in brackets) . To use 
the default, press the RETURN key. To replace default data, enter 
the new data to be used. To cancel the use of default data without 
entering new data, enter the backslash (\) character. 

You will have the opportunity to review and correct your responses 
before actually registering this license. If you wish to exit from 
giving responses, do so by typing CTRL/Z. 



PAK ID: 

* Issuer [DEC] : 

* Authorization Humber: USA000877 

PRODUCT ID: 

* Product Name: FORTRAN 

* Producer [DEC] : 

NUMBER OF UNITS: 

* Number of Units: 5000 

KEY LEVEL: 

* Version (vv.uu) : 5.0 

KEY TERMINATION DATE: 

* Key Termination Date (dd-mmm-yyyy) 

RATING: 

* Availability Table Code: f 

* Activity TaJale Code: 
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Example 7-3: VMSLICENSE Session Cont. 

MISCELLANEOUS: 

* Key Options: inod_units 

* Product Token; 

* Hardware ID: 

* Checksum: 1-LDFA-PGEA-AIEA-ICAL 



LMF Database 

Issuer 

Authorization Nvunber 

Product Name 

Producer 

Number of Units 

Version 

Product Release Date 

Key Termination Date 

Availability Table Code 

Activity Table Code 

Key Options 

Product Token 

Hardware ID 

Checksum 



SYS$COMMON: [SYSEXE]LMF$LICENSE.LDB 

DEC 

OSA000877 

FORTRAN 

DEC 

5000 

5.0 



MOD UNITS 



l-LDFA-PGEA-AIEA-ICAl 



* Is this information correct? Y 

DEC FORTRAN has been registered. 

* Do you want to LOAD this license on this system [YES] ? 

%LICENSE-I-LOADED, DEC FORTRAN was successfully loaded with 5000 units 

* Do you want to register another PAK? n 



VMS License Management Utility Options; 



1. Register a Product Authorization Key 

2. Amend an existing Product Authorization Key 

3 . Exit this procedure 



Select option: 3 
$ 

LICENSE MANAGEMENT FACILITY AND LICENSE AGREEMENTS 

The terms and conditions of your product contract determine your legal use of software. 
The LMF is a management tool that can help you comply with your license agreement. 
However, the LMF offers options for many kinds of license agreements. Using some 
of these options can be illegal for your specific contract. You must read your contract 
carefully to determine which LMF options you can use legally. 

For more information on your legal responsibilities, contact your DIGITAL representatives. 
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SOFTWARE INSTALLATION 

Installing a Major Release of the Operating System 

Instructions for installing the system are in VMS Installation and Operations manuals. 
There is one manual for each family of systems, for example: 

— VMS Installation and Operations: VAX 8820, VAX 8830, VAX 8840 

— VMS Installation and Operations: VAX 6200 Series 

— VMS Installation and Operations: VAX 8200, VAX 8250, VAX 8300, VAX 8350 

— VMS Installation and Operations: VAX- 1 1/780, VAX- 1 1/785 



Basic Steps in Installation 

1 . Build a VMS system volume on the new disk. 

a. If system device is removable, load scratch system volume in system device. 

b. Use standalone BACKUP to copy portion of VMS from distribution medium to disl<, to 
form kernel VMS system. 

c. Start kemel VMS system. 

d. BACKUP utility automatically copies remainder of VMS from distribution medium to 
scratch volume (during this step, you may need to answer some questions). 

e. Complete VMS system should exist on new system disk volume. 

2. Boot system using new system disk. 

3. Use SYS$UPDATE:VMSINSTAL.COM to install the mandatory update. 

4. Use the LICENSE utility to register the VMS license. 

NOTE 

In a new installation, you do not need to use the SYS$UPDATE:VMSINSTAL.COM 
to install updates or the LICENSE utility step. These operations are performed 
automatically. 
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5. Customize the new system volume and console volume for your site. 

• Use SYS$UPDATE:VMSTAILOR.EXE to remove unwanted files from the system 
volume. 

Use AUTHORIZE to add UAF records, proxy records, and rights database Infonnation 
to the UAF. 

Use SYSMAN to set up disk quotas on data volumes. 

Modify site-specific startup command procedure files. 

Decompress the system libraries. 

• If necessary, change default boot file on console volume, following instmctions in the 
appropriate VMS Installation and Operations manual. 

— On some systems, you use console commands. 

— On other systems, you use SYS$UPDATE:SETDEFBOO.COM. boot file. 

Run the User Environment Test Pacl<age (UETP). 

If necessary, create a spare console volume, following instructions in the appropriate 
VMS Installation and Operations manual. 

Use standalone BACKUP to make a copy of the system volume. 
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Upgrading the Operating System 



Perform an upgrade to convert an existing system to a new major release of VMS, leaving 
all user files intact. 

The upgrade procedure is documented in a single place, generally the VMS Release Notes 
for that version. 

Before upgrading, use standalone BACKUP to back up the system disk. 

Following the directions in the release notes, use SYS$UPDATE:VMSINSTAL.COM to 
perfomn the upgrade. The upgrade procedure: 

— Purges and deletes some VMS files to make room for the upgrade 

— Transfers VMS files from the distribution medium to the system disk 

— Merges the old system files and the new system flies 

— Cleans up files and structures used only during the upgrade 
After the upgrade: 

— Use SYS$UPDATE:VMSINSTAL to install the mandatory update. 

— Run UETP to test installation. 

— Use BACKUP to make a copy of the new system volume. 

— If the console volume was modified during the upgrade procedure, make a spare copy 
of the console volume. 
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Installing Maintenance Updates 

Two situations in which you update the VMS operating system: 

— After an installation or upgrade, you must apply a mandatory update. 

— Some releases of the VMS operating system do not require a full upgrade, merely an 
update. 

The update procedure is documented in the VMS Release Notes for that version. 

Before the update, use standalone BACKUP to back up the system disk. 

Following the directions In the release notes, use SYS$UPDATE:VMSINSTAL.COM to 
perform the update. The update procedure: 

— Applies patches to some system files 

— Replaces some system files 
After the update: 

— Run UETP to test system integrity. 

— Use BACKUP to make a copy of the new system volume. 

NOTE 
Maintenance updates MUST be installed in the proper sequence. 
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Running UETP 



The User Environment Test Package (UETP) tests: 

— All standard peripheral devices 

— Various commands and operating system functions 

— The system's multiuser capability 

— DECnet-VAX software 

Instmctlons for running UETP are In the VMS Installation and Operations manual for your 
processor. 

Basic steps in using UETP: 

— Log in with user name SYSTEST. 

— Prepare devices for testing. 

— Execute UETP. 

1 . $ @UETP 

2. At UETP prompts, press RETURN key to request default action. 

3. By default, UETP runs all possible tests. 

— If UETP does not complete successfully, see the chapter on UETP in your VMS 
Installation and Operations manual. 

— If you are unable to correct an error by following directions in the manual, get help from 
your DIGITAL Field Service representative. 
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Installing Optional (Layered) Products 

Install optional products after Installing VMS and running UETP. 

• Use SYS$UPDATE:VMSLICENSE.COM to register Product Authorization Key (PAK) for the 
product. 

Consult optional product's software installation guide for additional steps and further 
Instructions. 

— Some optional software is part of the VMS kit and requires no further Installation. 
These System Integrated Products include: 

DECnet-VAX 
VAXcluster Software 
VAX Volume Shadowing 
RMS Joumaling 

— For most products, you use SYS$UPDATE:VMSINSTAL to copy the product software 
to the system disk. 

Example 7-4: Using the VMSINSTAL Command Procedure to Install FORTRAN 

S eSYS$DPDATE: VMSINSTAL FORT050 MUAO : 

VAX/VMS Software Product Installation Procedure V5.0 

It is 12-MAY-1988 at 12:11. 

Enter a question mark (?) at any time for help. 



* Are you satisfied with the backup of your system disk [YES]? I RETURN | 

The following products will be processed: 
FORT V5.0 

Beginning installation of FORT V5 . at 12 : 12 

%VMSINSTAL-I-RESTORE, Restoring product saveset A ... 

%VMSINSTAL-I-RELMOVED , The product's release notes have been successfully moved to SYS$HEIiP. 

Product: FORTRAN 

Producer : DEC 

Version : 5.0 

Release Date: l-FEB-1988 

* Does this product have an authorization key registered and loaded? YES 

* Do you want to purge files replaced by this installation [YES]? IRETURN] 



* Do you want to install the VAX FORTRAN compiler [YES]? IRETURN | 

This kit contains an Installation Verification Procedure 
(IVP) to verify the correct installation of the VAX 
FORTRAN compiler. The IVP will be left in: 

SYSSSYSROOT: [SYSTEST .FORTRAN] FORTPANS IVP .COM. 
After the installation is con^lete, you can invoke the 
command file at any time to reverify that VAX FORTRAN is 
installed and working correctly. 
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Example 7-4: Using the VMSINSTAL Command Procedure to Install FORTRAN Cont. 



* Do you want to run the IVP after the installation [YES]? | RETURN 



This kit contains a file sununarizing the new features, 
changes, restrictions, and compatibility issues in this 
release of VAX FORTRAN. The name of this file is 
FORT050.RELEASE_NOTES and it is placed in SYS$HELP!. 

This file contains information valuable to VAX FORTRAH 
programmers . Please inform your user community of this 
file's existence. 

This kit also contains the file, FORTBANFIXES050.MEM, 
summarizing the bug fixes made to the VKH FORTRAN 
con^iler since its last release. This file will be 
placed in SYS$HELP:. 



* Would you like a copy of it printed now? [NO]? | RETURN 



In order to build your FORSYSDEF library, this procedure 
requires at least 6000 blocks of available disk space, 
most of which is used for temporary work files . The 
FORSYSDEF library itself will take approximately 1900 
blocks of disk space upon coirpletion of this procedure 
and will be placed in your SYS$LIBRARY area. 

NOTE 

Before installing FORSYSDEF, be sure to have read the 
appropriate section of the installation guide which 
addresses the question of when a new FORSYSDEF should 
be built. 

* Do you want to build a new FORSYSDEF . TLB [NO]? YES 

* Do you want to install FORTRAN help [YES] ? 

This kit contains two separate HELP files, a large 
version (approximately 600 blocks) including information 
on FORTRAN language features, and a smaller version 
(approximately 100 blocks) describing only the FORTRAN 
command . 
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Example 7-4: Using the VMSINSTAL Command Procedure to Install FORTRAN Cont. 

* Do you want to install the larger version of FORTRAN help [YES] ? 

All questions regarding the installation of VAX FORTRAN 
have now been asked. Depending upon your configuration, 
time estimates for the installation (s) have been provided. 

VAX FORTRAN coir^jiler: 3 to 60 minutes 
FORSYSDEF . TLB : 10 to 120 minutes 

FORTRAN HELP: 1 to 15 minutes 

%VMSINST7U:,-I-SYSDIR, This product creates system disk directory VMI$ROOT: [SYSTEST. FORTRAN] 
%CREATE-I-EXISTS, VMI$R0OT: [SYSTEST. FORTRAN] already exists 

+ + 

I Installing the VAX FORTRAN V5 Compiler | 

+ + 

+ + 

I Installing FORSYSDEF . TLB | 

+ + 

+ + 

I Installing VAX FORTRAN HELP | 

+ + 

Your VMS system will now be updated to include the 
following new and modified file(s): 

SYS$HELP :FORT050.RELEASE_NOTES [new] 

SYS$ SYSTEM: FORTRAN. EXE [new] 

SYS$MESSAGE: PORTERRl.EXE [new] 

SYS$MESSAGE : F0RTERR2 . EXE [new] 

SYS$LIBRARY:FORTV5CLD.CLD [new] 

SYS$LIBRARY :DCLTABLES .EXE [modified] 

SYS$HELP:FORTRAHFIXES050.MEM [new] 

SYS$TEST:FORTRAN$IVP.COM [new] 

SYS$LIBRARY: FORSYSDEF. TLB [new] 

SYS$TEST;FORSYSDEFTST.COM [new] 

SYS$HELP:HELPLIB.HLB [modified] 

%VMSINSTAL-I-MOVEFILES, Files will now be moved to their target directories... 

+ + 

I Verification Command Procedure for | 

I VAX FORTRAN | 

+ + 

VAX FORTRAN V5.0-34 TEST PASSED 

VMSINSTAL procedure done at 12:36 
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CUSTOMIZING AND BACKING UP THE CONSOLE 
VOLUME 

If your system has a console volume, you must customize the boot environment to match 
the system configuration, if necessary, modify: 

— The default bootstrap command procedure 

— Any other command procedure on console volume 
Back up the console volume 

— For systems with a removable console volume, (for example, VAX 8250, VAX 8350, VAX 
8650, VAX-11/780, VAX-11/750, and VAX-11/730) use SYS$UPDATE:CONSCOPY.COM 
to copy the console volume. Follow directions in your VMS Installation and Operations 
manual. 

First use CONSCOPY.COM to copy the console files to a directory on the VAX 
system. 

Then use CONSCOPY.COM to copy the files from the directory on the VAX system 
to a new console volume. 

— For systems with a fixed console disk, (for example, VAX 8810, VAX 8820, VAX 8830, 
and VAX 8840) the tape cartridges or diskettes shipped with your system sen/e as a 
backup copy of the console volume. Follow directions in the Console User's Guide 
should you need to reinstall the console files. 
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Example 7-5: Saving the Contents of the Console Volume 

$ 8sys$update:cor.scopy 

Sys$aPDATE : CONSCOPY. COM 
Save or restore a VMS console medium. 

Which CPU kit do you want to build? 

78X includes 11/780, 11/782 and 11/785 
8600 includes 8650 
8200 includes 8300 

[8600, 8200, 78X, 750 or 730, default 8200] : | RETURN) 

A SAVE operation involves copying the console medivun to 
an RT-11 virtual volume, which is a Files-11 file that 
is an image of the RT-11 console volume. 

A RESTORE operation involves copying the entire contents 
of a virtual volume to a console medium. 

Do you want to SAVE or RESTORE your console RX50?: SAVE 

Enter file name of virtual disk [default SYS$DISK:CONSOLE.DSK] : [RETURN 

Do you want log messages as files are copied? (Y/N, default Yes] : YES 

Enter console device drive (DDCO:): CSAl: 

Put your console RX50 into drive _CSA1 : , 

and type <RETURN> when ready: | RETURN | 

%MOUNT-I-MOUNTED, VAX console mounted on _CSA1 : 

%EXCHANGE-S-INITIALIZED, the RT-11 volume W0RK3: [MATTHEWS] CONSOLE. DSK;1 has been initialized 
%EXCHANGE-S-MODNTVIR, the RT-11 virtual volume CONSOLE_SAVE : has been mounted 

using the file W0RK3 : [MATTHEWS] CONSOLE. DSK;1 
%EXCHANGE-S-MOUNTED, the RT-11 volume _CSA1 : has been mounted 

%EXCHANGE-S-COPIED, _CSA1:FG81 . VFO copied to CONSOLE_SAVE:FG81 .VFO, blocks 
%EXCHANGE-S-COPIED, _CSAl:BOOT58.EXE copied to C0NSOLE_SAVE:B00T58.EXE, 23 blocks 
%EXCHANGE-S-COPIED, _CSA1 : VMB . EXE copied to C0NS0LE_SAVE : VMB . EXE , 55 blocks 
%EXCHANGE-S-COPIED, _CSA1 :CI780 .BIN copied to C0NS0LE_SAVE: CI780.BIN, 36 blocks 
%EXCHANGE-S-COPIED, _CSA1 : CIBCA.BIN copied to CONSOLE_SAVE:CIBCA.BIN, 65 blocks 
%EXCHANGE-S-COPIED, _CSA1 : CSABOO . CMD copied to CONSOLE_SAVE: CSABOO.CMD, 1 block 
%EXCHANGE-S-COPIED, _CSA1 : CIBOO . CMD copied to CONSOLE_SAVE: CIBOO.CMD, 2 blocks 
%EXCHANGE-S-COPIED, _CSA1 : KDBBOO . CMD copied to CONSOLE_SAVE: KDBBOO.CMD, 2 blocks 
%EXCHANGE-S-COPIED, _CSA1:C0NS0L.HLP copied to CONSOLE_SAVE : CONSOL . HLP , 5 blocks 
%EXCHANGE-S-COPIED, _CSA1: CI78V5 .BIN copied to CONSOLE_SAVE: CI78V5.BIN, 36 blocks 
%EXCHANGE-S-COPIED, _CSA1: CI78VS.BIN copied to CONSOLE_SAVE: CI78V6.BIN, 36 blocks 
%EXCHANGE-S-COPIED, _CSA1 : DEFBOO . CMD copied to CONSOLE_SAVE : DEFBOO . CMD , 1 block 

Directory of RT-11 volume CONSOLE_SAVE : ll-MAY-1988 12:13 

using W0RK3 : [MATTHEWS] CONSOLE. DSK;1 
Volume ID: 8200 console Volume Owner: MATTHEWS System ID: DECVMSEXCHNG 

FG81.VF0 ll-May-1989 BOOT58.EXE 23 ll-May-1988 

VMB. EXE 55 ll-May-1988 CI780.BIN 36 ll-May-1988 

CIBCA.BIN 65 ll-May-1988 CSABOO.CMD 1 ll-May-1988 

CIBOO.CMD 2 ll-May-1988 KDBBOO.CMD 2 ll-May-1988 

CONSOL. HLP 5 ll-May-1988 CI78V5.BIN 36 ll-May-1988 

CI7eV6.BIN 36 ll-May-1988 DEFBOO.CMD 1 ll-May-1988 

Total of 12 files, 262 blocks. Free space 526 blocks, largest 526. 
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Example 7-5: Saving the Contents of the Console Volume Cont. 

The SAVE of your console RX50 is con^ylete. 

Since the console device is now accessible to users, the 
console should be remounted write-locked for protection. 
Please place your console medium back in the console 
device, and it will be mounted with /SYSTEM /NOWRITE 
protection to prevent access by unprivileged users. 



Type literal «)RETORN> when ready: I RETURN! 
%MOUNT- 1 -MOUNTED, VAX console moiinted on _CSA1 : 

$ @SYS$OPDATE:CONSCOPY 

SYS$UPDATE:CONSCOPY.COM 

Save or restore a VMS console medium. 

Which CPU kit do you want to build? 

78X includes 11/780, 11/782 and 11/785 
8600 includes 8650 
8200 includes 8300 

[8600, 8200, 78X, 750 or 730, default 8200] : I RETURN | 

A SAVE operation involves copying the console medium to 
an RT-11 virtual volume, which is a Files-H file that 
is an image of the RT-11 console volume. 

A RESTORE operation involves copying the entire contents 
of a virtual volume to a console medium. 

Do you want to SAVE or RESTORE your console RX50?! RESTORE 

Enter file name of virtual disk [default SYSSDISK: CONSOLE. DSK] : I RETURN] 

Do you want log messages as files are copied? [Y/N, default Yes] : YES 

Enter console device drive (DDCU:): CSAl : 



Put your console RX50 into drive _CSA1 : , 

and type <RETaRN> when ready: | RETURN | 

%MOUNT- 1 -MOUNTED, VAX console mounted on CSAl ! 



%EXCHANGE-S-INITIALIZED, the RT-11 volume _C.«;A1 : has been initialized 
%EXCHANGE-S-MOUNTVIR, the RT-11 virtual volume CON SOLE _RE STORE: has been mounted 

using the file W0RK3: [MATTHEWS] CONSOLE. DSK;i 
%EXCHAN6E-S -MOUNTED, the RT-11 volume CSAl: has been mounted 

%EXCHANGE-S-COPIED, C0NS0LE_RESTORE:FG81 .VFO copied to _CSA1 :FG81 .VFO, blocks 
%EXCHANGE-S-COPIED, C0NS0LE_REST0RE:B00T58 -EXE copied to _CSA1 :BOOT58 .EXE, 23 blocks 
%EXCHftNGE-S-COPIED, CONSOLE_RESTORE:VMB.EXE copied to _CS Al : VMB . EXE , 55 blocks 
%EXCHANGE-S-COPIED, CONSOLE_RESTORE:CI7eO.BIN copied to _CSA1 :CI780 -BIN, 36 blocks 
%EXCHANGE-S-COPIED, C0NS0LE_REST0RE: CIBCA.BIN copied to _CSA1 : CIBCA.BIN, 65 blocks 
%EXCHANGE-S-COPIED, C0NS0LE_REST0RE: CSABOO.CMD copied to _CSA1 : CSAB0O.CMD, 1 block 
%EXCHftNGE-S-COPIED, C0NS0LE_REST0RE : CIBOO.CMD copied to _CSA1 : CIBOO.CMD, 2 blocks 
%EXCHANGE-S-COPIED, CONSOLE_RESTORE : KDBBOO.CMD copied to _CSA1 :KDBBOO .CMD, 2 blocks 
%EXCHANGE-S-COPIED, CONS0LE_REST0RE:CONS0L.HLP copied to _CSA1 : CONSOL . HLP , 5 blocks 
%EXCHANGE-S-COPIED, C0NS0LE_REST0RE:CI78V5 .BIN copied to _CSA1 :CI78V5 .BIN, 36 blocks 
%EXCHANGE-S-COPIED, C0NS0LE_REST0RE :CI78V6 .BIN copied to _CSA1 :CI78V6 .BIN, 36 blocks 
%EXCHANGE-S-COPIED, CONSOLE RESTORE :DEFB00. CMD copied to _CSA1 : DEFB00.CMD, 1 block 
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Example 7-5: Saving the Contents of the Console Volume Cont. 



Directory of RT-11 volume _CSA1 : ll-MAY-1988 12:15 

Volume ID: 8200 console Volume Owner: MATTHEWS System ID: DECVMSEXCHNG 



FGBl.VFO 





ll-May-1988 


BOOT58.EXE 


23 


ll-May-1988 


VMB.EXE 


55 


ll-May-1988 


CI780.BIN 


36 


ll-May-1988 


CIBCA.BIN 


65 


ll-May-1988 


CSABOO.CMD 


1 


ll-May-1988 


CIBOO.CMD 


2 


ll-May-1988 


KDBBOO.CMD 


2 


ll-May-1988 


CONSOL.HLP 


5 


ll-May-1988 


CI78V5.BIN 


36 


ll-May-1988 


CI78V6.BIN 


36 


ll-May-1988 


DEFB0O.CMD 


1 


ll-May-1988 



Total of 12 files, 262 blocks. Free space 526 blocks, largest 526. 

The RESTORE of your console RX50 is con^lete. 

Since the console device is now accessible to users, the 
console should be remounted write-locked for protection. 
Please place your console medium back in the console 
device, and it will be mounted with /SYSTEM /NOWRITE 
protection to prevent access by unprivileged users. 

Type <RETURN> 

when ready: |RETURN| 
%MOONT- I -MOUNTED, VAX console mounted on CSAl : 
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CREATING A NEW SYSTEM DISK FROM ANOTHER 
SYSTEM DISK 

Ways to create a new VMS system disk: 

— Perform a VMS installation onto the disk. 

— Use SYS$UPDATE:VMSKITBLD.COM to copy VMS files from an existing system disk 
to the new disk. 

— Use SYS$MANAGER:CLUSTER_CONFIG.COM to copy VMS. 
Example 7-6: Building a System Disk with VMSKITBLD.COM 

$ eSYS$UPDATE:VMSKITBLD 

$! Copyright (c) 1988 Digital Equipment Corporation. All rights reserved. 

Operation [BUILD, ADD, COPY, COMMON] ? BUILD 

Enter mounted SOURCE disk name (ddcu:) : SYS$SYSDEVICE: 

Enter SOURCE top level system directory [default = SYSO] : VMS$COMMON 

Enter TARGET disk name (ddcu:): KNIFE$DUAO: 

Enter the TARGET disk's label [default = VAXVMSRL5] : 

Enter TARGET disk top level system directory [default = SYSO] : 

%DCL-I-ALLOC, _KNIFE$DUAO: allocated 

The target disk will be initialized. 

Target disk, _KNIFESDUAO : , ready to be initialized? (Y/N) ; Y 

Target disk, _KNIFE$DUAO : , has been initialized. 

%MOUNT- I -MOUNTED, VAXVMSRL5 mounted on _KNIFE$DUAO: 

Creating directories for system. 

Creating SYSGEN files. 

%SYSGEN-I-CREATED, _KNIFE$DUAO:<SYSO .SYSEXE>SWAPFILE.SYS;1 created 

%SYSGEN-I-CREATED, _KNIFE$DUAO:<SYSO .SYSEXE>PAGEFILE .SYS;1 created 

%SYSGEN-I-CREATED, _KNIFE$DUAO: <SYSO .SYSEXE>SYSDOMP .DMP; 1 created 

Copying files from source disk. 

Writing a boot block. 

$IF ( (EXIT_STATUS .EQ. 1) .AND. (.NOT. KIT)) THEN SAY "System disk con5>lete." 

System disk complete . 

$EXXT EXIT STATUS 
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STANDALONE BACKUP 

Use standalone BACKUP, not on-line BACKUP, to back up the system disk. 

1 . Shut down the system. 

2. Boot the system using standalone BACKUP kit on console volume or system volume. 
Generally, tx)oting from the system volume is faster. 

3. Use standalone BACKUP to copy the system volume to disk or tape. 



Creating a Standalone BACKUP Kit 

On console media 

— SYS$UPDATE:STABACKIT.COM 

— Requires at least: 

Five RX01 floppy diskettes 
Four RX50 floppy diskettes 
One TK50 tape cartridge 

On system volume 

— SYS$UPDATE:STABACKIT.COM 

— Procedure copies kit Into root directory [SYSE.] 
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Example 7-7: Creating a Standalone BACKUP Kit on the System Disk 

$ esYS$OPDATE : STABACKIT 

STABACKIT-I-SYMDEL, all global symbols deleted 

Enter the name of the device on which to build the kit: SYS$SYSDEVICE : 

Sysgen parameters for standalone VMS have been placed in file 

SYS$SYSROOT:<SYSUPD>VAXVMSSYS.PAR-TEMP-2080023D;1 
%COPY-S-COPIED, SYS$C0^M0N:<SYSEXE>STASYSGEN.EXE;1 copied to 
_BROWNY$DJAO!<SYSE.SYSEXE>SYSINIT.EXE;1 (92 blocks) 
%C0PY-S-COPIED, SYS$COMMON:<SYSEXE>sySBOOT.EXE;2 copied to 
_BROWNYSD JAO : <sySE . SYSEXE>SYSBOOT . EXE ; 1 (117 blocks ) 

%COPY-S-COPIED, SYS$SYSROOT:<SYSDPD>VAXVMSSYS.PAR-TEMP-2080023D;1 copied to 
_BROWNY$DJAO:<SYSE.SYSEXE>VAXVMSSYS.PAR;1 (15 blocks) 
%SET- I -ENTERED, BROWNY$DJA0:<SYS0>SYSCOMMON.DIR; 1 entered as 
_BROWNY$D JAO : <SYSE>SYSCOMMON . DIR; 1 

%COPY-S-COPIED, SYS$COMMON:<SYSSLDR>DODRIVER.EXE;l copied to 
_BROWNY$DJAO:<SYSE.SYS$LDR>DSDRIVER.EXE;1 (35 blocks) 
%COPY-S-COPIED, SYS$COMMON!<SYSEXE>STABACKOP.EXE;l copied to 
_BROWNY$D JAO : <SYSE . SYSEXE> STAND ALON . EXE; 1 (429 blocks ) 

%DELETE-I-FILDEL, SYS$SYSROOT!<SYSOPD>VAXVMSSYS.PAR-TEMP-2080023D;1 deleted 
(16 blocks) 

Ending time 4-MAY-1988 16:49:07.89 
Starting time 4-MAY-1988 16:48:20.82 

The kit is complete . 

$ 
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Using a Standalone BACKUP Kit 

• To boot standalone BACKUP from the system disk, see your VMS Installation and 
Operations manual. 

— Some systems already have a console command procedure that boots standalone 
BACKUP. 

— On other systems, you must create a new command procedure to boot the system 
from root [SYSE.] 

To boot standalone BACKUP from the console device: 

— If you are booting from a removable console volume, load the first standatone BACKUP 
volume into the console drive. 

— Enter the appropriate boot command. See the VMS Installation and Operations manual. 

— If you are booting from a removable console volume, standalone BACKUP directs 
loading operation. Load appropriate volumes into the console drive as requested. 

After standalone BACKUP is loaded, the DCL prompt appears on console terminal. 

At the DCL prompt, enter BACKUP commands. 
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SUMMARY 

Software installation involves two steps: 

— Installing the Product Authorization Key (PAK) 

— Transferring the software from the distribution medium to the system disk 

The VMS License Management Facility (LMF) provides software for managing PAKs. The 
LMF consists of: 

— License Unit Requirements Tables (LURTs), which specify the numt>er of units required 
for each type of VAX system 

— The LICENSE database LMF$LICENSE.LDB, which contains information about installed 
keys 

— The License Management utility, which maintains the LICENSE database 

— SYS$UPDATE:VMSLICENSE.COM, which helps you use the License Management 
utility 

To run VMS on a new system, you perform an installation. Instmctlons for installing the 
system are in VMS Installation and Operations manuals. There is a different manual for 
each series of processors. 

To install a new major release of VMS on an existing system, you perform an upgrade. The 
upgrade procedure is documented in the VI\/IS Release Notes for that version. 

To install a minor release or a mandatory update of VMS, you perform an update. The 
update procedure is documented in the VMS Release Notes for that version. 

After installing, upgrading, or updating, run the User Environment Test Package (UETP) to 
test system integrity. 

If your system has a console volume, you must customize boot procedures for your system 
configuration. Make a backup copy of the console volume after changing it. 

To install VMS upgrades or updates or optional (layered) software products, use the 
command procedure SYS$UPDATE:VMSINSTAL. 

— For a layered product, there may be additional steps in installation. These steps are 
documented in the product's Installation Guide. 

Use VMSKITBLD.COM if you need to create a new VMS system disk on an existing system. 

Use standalone BACKUP to back up the system disk. You can use 
SYS$UPDATE:STABACKITCOM to build standalone backup on the system disk or on 
console media. 
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MODULE 8 
MAINTAINING SYSTEM INTEGRITY 
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INTRODUCTION 

The system manager is responsible for coordinating Ixith tfie maintenance and security of the 
hardware and software on a system to establish system integrity. Users should be able to 
modify data files, access devices, and run long programs without fear that their work will be 
corrupted or will need to be repeated. 

The manager has several tools to maintain system integrity. Some tools analyze the error data 
that the system collects, others establish security of data files and programs. The manager 
must define the level of integrity required, choose tools to maintain that level of integrity, and 
use these tools effectively. 

When a problem occurs on a system, the manager must try to determine whether a software 
error or a hardware error has caused it. To determine this, the manager should analyze recent 
error logs and run simple diagnostics. Some problems require more intensive diagnostics that 
a field service specialist should run. 

The system manager is not expected to identify and solve every VMS system problem that may 
arise. Rather, he or she should be able to: 

Investigate problems and collect information 

Use system documentation to research and solve elementary problems 

Pass more difficult problems on to DIGITAL Field Service personnel or to experienced 
DIGITAL Software Services personnel 

This module covers the tools that the system manager needs to maintain the hardware and 
software, establish security, and diagnose problems. 
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OBJECTIVES 

To collect Information useful for troubleshooting, the system manager should: 
Perform regular hardware and software maintenance checks 
Ensure system security 

— For physical security of the computer 

— In the software environment on the computer 
• Be able to use the AUTHORIZE utility 

Read system dump files using the System Dump Analyzer 

RESOURCES 

1. Guide to Maintsuning a VMS System 

2. Guide to VMS System Security 

3. VMS System Generation Utility Manual 

4. VMS DCL Dictionary 

5. VMS Error Log Utility Manual 

6. VMS System Dump Analyzer Utility Manual 

7. DIGITAL Site Preparation Guide 
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HARDWARE MAINTENANCE 

Hardware maintenance involves 

— Care of devices (CPU, disks, terminals) 

— Care of media (tapes, disl<s, line printer paper) 

Handling and Storing Media 

Devices and media are sensitive to: 

— Rough treatment 

— Dust 

— Sudden impact 

— Electrical noise 
Handling media 

— Only trained personnel should handle and load media 

— Store unused media in closed metal cabinets 

— Media containing valuable infonnation should be stored off site in a fireproof vault 
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Cleaning Media 



Cleaning and maintenance tasks usually perfonned by customers include 

— Cleaning heads, rollers, and vacuum area of tape drive 

— Cleaning outside cover of disk drive 

— Changing printer ribbons 

— Wiping terminal screen 
DIGITAL Field Service tasks Include 

— Aligning heads of disk and tape drives 

— Cleaning interiors of disk and tape drives 

— Fixing print heads 

Unsafe media is "rejected" at cleaning time 

— Back up all media before having it cleaned 
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Maintaining the Environment 

System manager should set up and control 

— Temperature 

— Humidity 

— Power 

— Flooring 

— Dust 

— Electrical noise 

— Lighting 

— Fire and safety precautions 

Preventive Maintenance 

Regular hardware maintenance Is vital 

— Disk and tape head misalignment can result in loss of data 
DIGITAL Field Service can satisfy maintenance needs 
Self-Maintenance Handbook contains useful maintenance instmctions 
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SOFTWARE MAINTENANCE 

Software maintenance includes: 

— Maintenance of system files 

— Maintenance of user programs and data files 
• To perform maintenance: 

— Install updates and upgrades con-ectly 

— Run appropriate utilities regularly to obsen/e contents of certain system files 

— Back up system and user files regularly 
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SYSTEM SECURITY 
Physical Security 

• Security issues 

— Physical security of computer 

Access to console terminal 
Availability of dial-up lines 

— Media storage 
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Software Security 



For minimum security, system manager should 

— Keep SYSUAF.DAT and NETPROXY.DAT up to date 

— Use flags and hourly restrictions with AUTHORIZE 

— Insist on nontrivial passwords 

— Not publicize dial-up numbers 

— Not permit WORLD access to SYSUAF.LIS 

— Encourage use of file protection codes and ACLs 

— Request secondary passwords 

— Restrict user privileges 

— Create ACCOUNTING reports to check system usage 

— Label disks and tapes in systematic manner 
For additional security, manager can include 

— Erase-on-delete and erase-on-allocate for files 

— Login security 

— Break-in detection 

— Security auditing 
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Erase-on-Delete and Erase-on-Allocate 

Erase-on-delete (EOD) refers to activity of file system when files are deleted 

— File system overwrites blocks with zeros 

— Blocks unavailable for allocation until overwritten 

— Users implement EOD on file-by-file basis 

— Managers implement EOD on volume-by-voiume basis 

Erase-on-allocate (EOA, also known as highwater marking) refers to activity of file system 
when files are created or extended 

— File system ovenwrites blocks with zeros (or pattem of your choice) before allocating 
them 

— Set automatically for each volume at initialization 

— Disable highwater marking for less security-sensitive volumes 

$ SET VOLUME/NOHIGHWATER MARKING 
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Table 8-1 : Setting Erase-on-Delete for a File or Volume 



Command/Qualifier and Example 



Comments 



$ SET FILE/ERASE_ON_DELETE 
$ file-neune 



Sets characteristic of file so file system performs an 
EOO when you delete it. 



$ SET FILE/ERASE_ON_DEI.ETE - 
_$ GOVERNMENT_SECRETS.DAT 

$ DELETE/ERASE_ON_DELETE - 
$ f ile-neune 



Tells the file system to perform an EOD as you 
delete the specified file or files. 



$ DELETE/ERASE_ON_DELETE - 
_$ MY_SECRETS.DAT 

$ PURGE/EBASE_ON_DEIiETE - 
$ £ile-naun« 



Tells the file system to perform an EOD on each file 
it deletes during the purge. 



$ PDRGE/ERASE_ON_DELETE - 
_$ COMPJUIY_SECRETS . * 

$ INITIALIZE/ERASE_ON_DELETE 
$ volume -name 



Tells the file system to perform an EOD for every 
file on this volume that users delete. 



$ INITIALIZE/ERASE_ON_DELETE 
_$ SECORE_VOLtJME : 

$ SET VOLOME/ERASE_ON_DEI.ETE ■ 
$ SECURE VOLUME: 



Modifies the volume's characteristic so the file 
system now performs an EOD on every file deleted 
from it. 
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Login Security 

AUTHORIZE and UAF Record Controls 

• Use the AUTHORIZE utility to set 

— Expiration date on UAF records 

— Minimum password length 

— Expiration date for password 

— Passwords that must be changed when user logs In for the first time 
Can define secondary password for accounts 

Can have VMS automatically provide a list of randomly generated passwords to select from 



Table 8-2: Defining User Passwords 



Commands 



Comments 



$ RUN AUTHORIZE 

UAF> MODIFY SMITH /PASSWORD=MaRY 

$ RUN AUTHORIZE 

UAF> MODIFY SMITH /PASSWORD" ( " " , SECOND) 



$ SET PASSWORD 

$ SET PAS SWORD /SECONDARY 

$ SET PASSWORD/GENfiRATE 



Modifies any user password with the AUTHORIZE 
utility. 

To add a secondary password to a UAF record, 
use the /PASSWORD qualifier with the MODIFY 
command. This command does not affect the 
current value of the primary password if you 
properly specify a null first password string. 

Modifies your own primary password. 

Modifies your own secondary password. 

You can request or require (using the 
/FLAG=GENPWD qualifier in AUTHORIZE) that 
VMS generate a random list of passwords to 
choose from. If you enter the /GENERATE 
qualifier and receive a list, you must choose a 
password from that list, or request another list. 
(You do not need the /GENERATE qualifier If 
password generation has been set in your UAF 
record.) 
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Can require system password for terminals 
System password kept as a special UAF record 
System password can be set 

— At DCL: $ SET PASSWORD/SYSTEM 

— Within AUTHORIZE: MODIFY /SYSTEM_PASSWORD 



Table 8-3: Defining a System Password for a Terminal 



Step/Function 



Step1: 

$ SET PASSWORD/SYSTEM 
Old password : 
New password: 
Verification : 
$ 



Step 2: 



$ SET TERMINAL - 
_$ /SYSPWD /PERMANENT 
$ TXA2 



Comments 



Enter the old password In response to the first prompt. 
Then enter the new passwonJ in response to the next 
two prompts. None of the passwords are echoed while 
being entered. This command requires SECURITY and 
CMKRNL privileges. 



Set the specified terminal to require the system password 
in order to be used. To log in to this terminal a user must 
press the RETURN key, enter the system password (no 
prompt is given). If successful, the user continues the 
normal login procedure when the "Username:" prompt 
appears. 
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Users and managers should be aware of password requirements for accounts and terminals. 



Table 8-4: Using Passwords 



Situation 



Example 



Comments 



Normal account: 


RETURN 




requires one pass- 


Dsername : 


SMITH 


word 


Password: 




Accounting requiring 


RETURN 




primary and sec- 


Osername : 


SMITH 


ondary passwords 


Password: 
Password: 




Temiinal requiring 


<RETURN> 




a system password 


Username : 
Password: 


SMITH 



Tfie system does not echo the password. Note 
that you can define the password to be null. If 
you do that, you do not receive any password 
prompt. 

Passwords are not echoed. Typically, one 
person knows the primary password, but 
another knows the secondary one. Therefore, 
both must be present whenever this account is 
used. 

You do not receive a prompt for the system 
password. To avoid excessive reports of brol<en 
terminals, mal^e users aware of the ones 
requiring a system password, because unless 
they enter it successfully, the system will not 
display the "Username:" prompt. 
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Protecting Terminals and Other Nonshareable Devices 

Terminals (nonshareable devices) have owner UIC and protection code that determine 
access 

— To control device ownership and protection 

$ SET PROTECTION/DEVICE 

— To place access control list (ACL) protection on terminals and tape drives 

$ SET DEVICE/ACL 
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Table 8-5: Establishing Ownership and Protection of Terminals and Other Nonshareable 
Devices 



Operation 



Format of $ SET PROTEC- 
TION/DEVICE 

Command and Examples (Re- 
quires OPER privilege) 



Comments 



Establishing protection 
ownership 



Allowing all users 
access to a device 



Establishing system 
users as the owner 



$ SET PROTECTION=code/DEVICE- 
$/OWNER aiC= [uic] device 



$ SET PROTECTION/DEVICE device 
$ SET PROTECT ION /DEVICE TTA3 : 



$ SET PROTECTION = (S:R, :R, G, W) • 
$ /DEVICE/0WNER=[1,4] TTA3: 



By default, all terminals have the owner 
specified by the system parameter TTY_ 
OWNER and the protection specified by the 
syst«n parameter TTY_PROT. 

The default value for TTY_PROT allows 
all users access to the device. If you do not 
specify a protection code with this command, 
you ate assigning the default protection to 
the device. 

Only system users may allocate this terminal 
from a program. By q)ecifying that Group 
and World users have no access, you protect 
the terminal against password collection 
programs run by users. 



Set secure server characteristic on terminals to protect them from password-collecting 
programs 

$ SET TERMINAL/PERMANENT/ SECORE_SERVER/DISCONNECT TTCl : 

— Ensures that only VMS login program receives user name and password 

— Press BREAK key before RETURN key to receive "Usemame:" prompt 

— Cannot set secure server characteristic on tennlnals with AUTOBAUD characteristic 
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Break-In Detection at Login 

• System records information about login failures in suspect lists 

— User name suspect list 

— Terminal name suspect list 

— Node name suspect list 

• Several SYSGEN parameters provide break-in control 

— LGI category parameters 



Table 8-6: SYSGEN Parameters for Break-In Detection 



Parameter 



LGI BRK DISaSER 



LGI BRK LIM 



LGI BRK TERM 



LGI BRK TMO 



LGI HID TIM 



LGI RETRY LIM 



LGI RETRY TMO 



Comments 



Once an intruder has been detected, VMS sets the DISUSER flag 
in the account's UAF record (if the parameter is set to 1). Manual 
inten/ention by the system manager is necessary to reactivate the 
account. Use this feature with caution. 

Break-in limit defining the total number of consecutive login failures 
allowed within a reasonable time limit before a SUSPECT becomes 
an INTRUDER. 

Controls the association of terminals and user names for counting 
failures. By default, VMS sets this parameter to 1 so that terminals 
and user names are tracked together. If you use terminal servers, then 
you might want to set this parameter to (only track user names), 
since a LAT port (on the VAX side) is generally not a useful indication 
of the actual terminal being used. 

Timeout factor expressed in seconds (a delta time). Used in conjunction 
with LGI_BRK_LIM to decide if a SUSPECT is an INTRUDER. The 
larger this value, the more secure your system. 

Time factor expressed in seconds. System uses this value in an 
equation to determine the time interval during which an INTRUDER is 
subject to evasive action. The time interval calculated using LGI_HID_ 
TIM is different for each instance, so you never know exactly how long 
an INTRUDER will be evaded. 

Limits the number of times a user can retry the login procedure when 
coming in through dial-up lines. The default value is 3. 

The number of seconds allowed between login attempts on dial-up 
lines. The default value is 20 seconds. This means the user must 
properly log in within 20 seconds of a failed attempt, or the system will 
hang up the line. 
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Suspects can gain access to the system by entering the conect user name and password. 



Example 8-1: Suspect Logs in Successfully 

Username : JONES 

Password: 

User authorization failure 

Use r name : JONE S 

Password: 

User authorization failure 

Username : JONES 

Password: 

Welcome to node TIDE running V5.0 

Last interactive login on Saturday, H-JDN-19e8 08:59 

2 failures since last successful login 
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System creates intruder lists when login failures exceed break-in limit set by system 
manager 

— Separate intmder lists for user name, terminal name, and node name 

— Intnjders subject to evasive action 

Intruders CANNOT gain access to system even if they enter correct user name and 
password 

Example 8-2: Suspect Becomes an intruder 

<RETORN> 

THIS IS NODE TIDE 

Username : WEBSTER 

Password: 

User authorization failure 

Username: WEBSTER 

Password: 

User authorization failure 

Username : WEBSTER 

Password: 

User authorization failure 

This is node TIDE 

Username: WEBSTER 

Password: 

User authorization failure 

Username: WEBSTER 

Password: 

User authorization failure 

Username: WEBSTER 

Password: 

User authorization failure 
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UIC and ACL Protection 
VMS Protection Using UlCs 

In assigning UlCs to users, determine tlie extent to wliicli user processes need to: 

— Share access to files, volumes, and devices 

— Communicate interactively with one other 

— Affect or control one other 

For greater interaction, place users in the same UIC group 
For greater protection, place users in different groups 



Maintaining System Integrity 8- 21 



Table 8-7: Dividing Users into Groups 



User Situation 



Course of Action 



Resuit 



Users must allow some users 
access to their files and structures, 
but deny access to others on the 
system. 



Users do not need to protect files 
against access by each other, but 
you must protect files from their 
access. (System files usually have 
a group number from 0-10.) 

Users need not protect files, but 
shoidd divide them into groups 
for accounting and observation 
purposes. 



Divide users into groups along project or 
departmental lines. Assign a different group 
UIC number to each group. Leave room 
between each assigned number for additions 
later. 



Assign all users a UIC of [200,200] or some 
other UIC* 



Divide users into groups, t 
Either: 



Users within a group can access 
each other's files with the access set 
for GROUP in the protection code 
of the accessed file. Users outside a 
group will be able to get access to 
files belonging to a group member 
widi the access defined for WORLD 
only. 

All users own all user files and 
have OWNER access to all user 
files. Users cannot access system 
files. 



1 . Modify the system parameter RMS- 
FILEPROT to set the default protection 
assigned to all new files so WORLD has 
complete access. 

2. You can collect accounting information 
<Mi separate users (according to their 
UICs) but since aU files created allow 
all users complete access, the files are 
not really protected. In this case, newly 
created system files are not protected 
either. 



Create a LOGIN.COM 
file for each user and in- 
clude the SET PROTEC- 
TION/DEFAULT=(W:RWED) 

command in it. Do not in- 
clude this command in your 
LOGEN.COM file. 

You can collect accounting 
information on separate users 
(according to their UICs). 
Users can access all files on 
the system except your files 
and system files. 



t Do not assign a group number reserved for system users (typically 0-10). Modify the MAXSYSGROUP 
parameter to set the upper limit of the group number for system users as needed. 
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Table 8-8: Interaction Between Processes In Same Group 



Interaction Available 



Comment 



Can share files, volumes, and devices, yet 
deny access to processes In other groups 

Can communicate with each other by 
means of structures that processes in 
other groups cannot access 



Can affect and control other processes In 
group 



Accomplished by setting the protection codes of 
the files, volumes, and devices properly. 

For example: 

Group logical names 
Group mailbox logical names 
Group global section names 
Common event flag clusters 

Requires GROUP privilege. 
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VMS Protection Using ACLs 

Optional layer of protection for files 

Use to grant access to files for specific users rather than groups of users 
• Based on identifiers 

— Users can hold one or more identifiers 

— Files can specify access rights for holders of various identifiers 
Record access information for files in access control list (ACL) 
Define Identifiers and who holds them in rights database 

When user logs in, VMS creates access rights list for user, consisting of identifiers held 

When user attempts to access files, VMS compares access rights list of user with access 
control list of file 

— If no ACL on file, VMS determines access rights according to UIC of user and VMS 
protection code on file 

— If ACL does not allow access, SYSTEM and OWNER users can still gain the type of 
access allowed them in the VMS protection code 

— If user does not hold any identifiers listed in file's ACL, VMS determines access rights 
according to UIC of user and VMS protection code on file 
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Use the SET RIGHTS_LIST command to enable/disable identifiers witliin rights lists. 
Used for modifying process and system rights lists 
Controls access to objects: 

— Per-process 

— System-wide 

• IVIust use either /ENABLE or /DISABLE 

• l\^ust have CMKRNL and SYSNAM privileges to modify system rights list 



Table 8-9: Some Qualifiers for the SET RIGHTS LIST Command 



Qualifier 



Description 



/ENABLE 

/DISABLE 

/SYSTEM 

/PROCESS=process-name 

/IDENTIFICATION=pid 



Adds the specified Identifier to the process or system 
rights list. 

Removes the specified identifier from the process or 
system rights list. 

Specifies that the system rights list is to be modified. 
Requires SYSNAIVI and CMKRNL privileges. 

Specifies the name of the process whose rights list is to 
be modified. Requires CMKRNL privilege. 

Specifies the process identification value (PID) of the 
process whose rights list is to be modified. Requires 
CMKRNL privilege. 
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Table 8-10: Terminology Used to Discuss VMS Access Control 



Term 



Definition 



Object 
Agent 

Identifier 



Access Rights List 



Access Control List 



Anything that exists in the system to which protection can be applied, 
such as files and devices. 

Anything that generates a request for access to an object. The system 
checks such requests to determine whether to grant access. Examples 
include a process or a device. 

Unique name used to identify a group to which one or more users 
belong. An identifier is internally represented as a unique, 32-bil 
number. It is externally represented as an alphanumeric name. Both 
the system and the AUTHORIZE utility define identifiers and store 
them in SYS$SYSTEM:RIGHTSLISTDAT 

List of identifiers belonging to a particular user. When you log in, the 
identifiers you hold in the rights database (including your UIC) are 
copied into a rights list that is part of your process. The rights list is 
the staicture VMS uses to perform all protection checks. 

Collection of ACEs {Access Control Entries) that determine what 
access is to be allowed to an agent for an object. Some aspects of 
ACLs are: 

An ACL can contain one or more ACEs 

An object may have only one ACL 

For files, ACLs may or may not be propagated from a previous 
version of the file, or from the parent directory 



Access Control Entry 



Holders 



Access Allowed 



Options 



Entry in an Access Control List. Each entry has three parts: the 
identifier name, the options, and the access allowed. 

If an identifier is in the access rights list for a user, the user is a 
"holder" of that identifier. If a user holding several identifiers attempts 
to gain access to a file protected by an ACL, the system compares 
the user's identifiers to the ACEs in the ACL, and determines access 
according to the first match found. 

Recorded after the ACCESS keyword in an ACE. Defines the type of 
access allowed to an agent holding the identifier specified in the ACE. 
Types of access include: Read, Write, Execute, Delete, and None. 

Recorded after the OPTIONS keyword in an ACE. Specifies the 
characteristics of an ACL. 
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Table 8-11 : ACL- and UlC-Based Protection 



File Name and 
Owner UIC 



Type of Protection 



Access Allowed 



FILE.DAT 
[200,011] 

PROGRAM.FOR 
[200,011] 



JUNK.DAT 
[200,011] 



UlC-based protection: 
(S:RWED,0:RWED,G:RWE,W) 

UlC-based protection: 
(S:RWED,0:RWED,G:RWE,W) 

ACL allows users holding the 
identifier name SMITH to read 
the file. 

UlC-based protection: 
(S:RWED,0:RWED,G:RWE,W) 

ACL does not allow users 
holding the identifier name 
SMITH to have any access to 
the file. 



System and Owner have RWED ac- 
cess. Group users have RWE access. 
World users have no access. 

System and Owner have RWED ac- 
cess. Group users have RWE access. 
Users holding the identifier name 
SMITH have READ access only (even 
if they are in the Group category). 
Other users have no access. 

System and Owner users have RWED 
access (even those holding the identifier 
name SMITH). Group users have 
RWE access except those holding the 
identifier name SMITH. World users 
have no access. 
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System- Defined and User-Defined Identifiers 

System creates default identifiers in rights database 

— LOCAL 

— DIAL-UP 

— REI\40TE 

— INTERACTIVE 

— NETWORK 

— BATCH 

• Use default identifiers in ACL to define access rights for users 

(IDENTIFIER-MATH+LOCAL, OPTIONS=NONE, ACCESS=READ+WRITE) 

• System creates one identifier for each UIC 
Stores identifier in rights database 
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Example 8-3: AUTHORIZE Utility Creates Identifiers Automatically 

$ SET DEFAULT SYS$SYSTEM 

$ SET PROCESS/PRIVII,EGE=SYSPRV 

$ RUN AUTHORIZE 

UAF> 

UAF>SHO/ID/VALUE=UIC: [11,204] 

unable to conplete show command 

%SYSTEM-F-NOSUCHID, unknown rights identifier 

UAF> 

UAF>ADO TOM/UIC= [11,204] /ACCOONT=VMS/DEVICE=WORKl/DIRECTORY=[T<»i] 

user record successfully added 

identifier lOU value: [000011,000204] added to RI6HTSLIST.DAT 

UAF> 

UAF>ADD DICK/UIC= [11, 204 ] /ACCOUNT=VMS/DEVICE=WORKl/DIRECTORY= [DICK] 

user record successfully added 

unable to add DICK value: [000011,000204] to RI6HTSLIST.DAT 

%SYSTEM-F-DUPIDENT, duplicate identifier 

UAF> 

UAF>ADD HARRY/UIC= [11,204] /ACCOaNT=VMS/DEVICE=WORKl/DIRECTORY= [HARRY] 

user record successfully added 

unable to add HARRY value: [000011,000204] to RIGHTSLIST.DAT 

%SYSTEM-F-DUPIDENT, duplicate identifier 

0AF> 

UAF>SHOW/BRIEF [11,204] 

Owner Userneune UIC Accoxint Privs Pri Default Directory 



TOM [11,204] 


VMS 


Normal 


4 WORKl : 


[T<»1] 


DICK [11,204] 


VMS 


Normal 


4 HORK2 : 


[DICK] 


HARRY [11,204] 


VMS 


Normal 


4 WORKl : 


[HARRY] 


DAF> 










UAF>SHOW/IDENTIFIER/VALOE=DIC: [11 


,204] 








Neune 


Value 




Attributes 




TOM 


[000011, 


000204] 


NORESCORCE 




UAF> 










OAF>SHOW/ IDENT IF IER/OSER=TOM 










Name 


Value 




Attributes 




TOM 


[000011, 


000204] 


NORESOURCE 




OAF>SHOW/IDENTIFIER/USER=HARRY 










Nsune 


Value 




Attributes 




TOM 


[000011, 


000204] 


NORESOURCE 




OAF>SHOW/IDENTIFIER/USER=DICK 










Name 


Value 




Attributes 




TOM 


[000011, 


000204] 


NORESOURCE 




DAF> 










UAF>EXIT 










system authorization file modified 








no modifications made to network 


authorization file 






rights data base modified 

$ 
$ 
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System creates group identifiers 

— Wlien you add a UAF record with a UIC group number that is different from any 
previously recorded 

— Name of group identifier tal<en from ACCOUNT fieid in the new UAF record you are 
adding 

— Value of group identifier: [group-number, 177777] 

— Sample group identifier value: [00001 1 , 1 77777] 

— Subsequent additions of UAF records with this group UIC do not affect name or value 
of existing group Identifier 

You create general identifiers 

— You assign value or system assigns hexadecimal value 

— Value must be unique 
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Example 8-4: Displaying Identifiers and Values In the Rights Database 



$ SET DEFAULT SYS$ SYSTEM 

$ SET PROCESS/PRIVILEGE=SYSPRV 

$ RUN AUTHORIZE 

UAF> SHOW/ IDENTIFIER * 

Name 

BATCH 

BEYER 

BIERLY 

CHAPUT 

CHERPAS 

DECNET 

DIALUP 

FIELD 

FIELDTEST2 

GROUP 11 

HARBO 

HYLNKA 

HOUSSELL 

INVENTORY 

INTERACTIVE 

J65 

JULIAN 

LOCAL 

MARSH 

MATH 

MAYWALT 

NETMGR 

NETPRINT 

NETWORK 

OPERATOR 

PROJECT 

PROJMGMT 

REMOTE 

SASSMAN 

SMITH 

SUPERVISOR 

SYSTEM 

SYSTEST 
UAF> SHOW/ RIGHT S/USER=[*, *] 

Name 
Identifiers held by BEYER : 

FIELDTEST2 
Identifiers held by MARSH : 

FIELDTEST2 

GROUP 11 
Identifiers held by BIERLY : 

PROJMGMT 

FIELDTEST2 



Value 

%X80000001 

[000011,000005] 

[000011,000340] 

[000031,000030] 

[000071,000040] 

[000240,000240] 

%X80000002 

[000001,000010] 

%X80080011 

%X80080021 

[000031,000007] 

[000011,000120] 

[000011,000130] 

[000011,000343] 

%X80000003 

[000370,177777] 

[000021,000150] 

%X80000004 

[000011,000220] 

%X8001000A 

[000131,000120] 

[000013,000002] 

[000020,000002] 

%X80000005 

[000011,000001] 

%X8001000B 

%X80010007 

%X80010006 

[000131,000350] 

[000011,000200] 

%X80080022 

[000001,000004] 

[000001,000007] 

Value 

%X80080011 

%X80080011 
%X80080021 

%X80010007 
%X80080011 



DAF>SHOW/IDENTIFIER/FULL FIELDTEST2 

Name Value 

FIELDTEST2 %X80080011 

Holder Attributes 

MARSH NORESOURCE 

BIERLY NORESOURCE 

BEYER NORESOURCE 
UAF> 



Attributes 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

RESOURCE 

RESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

NORESOURCE 

Attributes 

NORESOURCE 

NORESOURCE 
NORESOURCE 

NORESOURCE 
NORESOURCE 

Attributes 
RESOURCE 
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Example 8-5: Managing the Rights Database 



$ SET DEFAULT SYS$SYSTEM 

$ SET PROCESS/PRIVILEGE=SYSPRV 

$ RON AUTHORIZE 

UAF>ADD/IDENTIFIER MATH 

identifier MATH value: %X8001000C 

OAF>GRANT/IDENTIFIER MATH BIERLY 

identifier MATH granted to BIERLY 

OAF> 

0AF>6RANT/IDENTIFIER MATH TOM 

identifier MATH granted to TOM 

OAF> 

OAF>SHO/RIGHTS/OSER=TOM 

Name 
Identifiers held by TOM : 

PROJECT 

MATH 
aAF> 
OAF>SHOW/RIGHTS/OSER=BIERLY 

Name 
Identifiers held by BIERLY : 
PROJMOIT 
FIELDTEST2 
MATH 
OAF> 
OAF>SH0W TOM 



added to RIGHTSLIST.DAT 



Value 



Attributes 



Dsername: TOM 

Account : VMS 

CLI : DCL 

Default : WORKl : [TOM] 

LGICMD: SYS$MANAGER:SYLOGIN 

Login Flags : 

Primary days: Mon Tue Wed Thu Fri Sat Sun 

Secondary days : 

No access restrictions 



%X8001000B 
%X8001000C 


NORESOURCE 
NORESOURCE 


Value 


Attributes 


%X80010007 
%X80080011 
%X8001000C 


NORESOURCE 
NORESOURCE 
NORESOURCE 


Owner: 

UIC: 

Tables: 


[11,204] ([VMS, TOM]) 



Expiration: 


(none) 


Pwdminimum : 6 


Login Fails: 


Pwdlif etime : 


! 180 00:00 


P wdchange : 2 3 -MAY- 


-1984 22:42 


Last Login: 


(none) (interactive), (none) (non-interaotive) 


Max jobs : 


Fillm: 


20 


Bytlm: 


12288 


Maxacct jobs: 


Shrfillm: 


Pbytlm: 





Maxdetach: 


BlOlm: 


6 


JTquota : 


1024 


Prolm: 


2 DIOlm: 


6 


HSdef: 


150 


Prio: 


4 ASTlm: 


20 


WSquo: 


200 


Queprio : 


TQElm: 


10 


WSextent : 


500 


CPU: (none) Enqlm: 


40 


Psflguo: 


10000 


Authorized Privileges: 








TMPMBX NETMBX 








Default Privileges: 








TMPMBX NETMBX 








Name 




Value 




Attributes 


Identifiers 


held by TOM : 








PROJECT 




%X8001000B 


NORESOURCE 


MATH 




%X8001000C 


NORESOURCE 


OAF> 
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Table 8-12: AUTHORIZE Commands Used to Manage the Rights Database 



Command/Example 



Function 



UAF>ADD/IDENTIPIER id-name 
OAF>ADD/IDENTIFIER PAYROLL 

OM'>SHOW/IDENTIFIER/FULL id-name 
DAF> SHOW/ IDENT IF lER/FOLL PAYROLL 

OAF>GRANT/IDENTIFIER id-name user-name 
aAF>6RANT/IDENTIFIER PAYROLL SMITH 



UAF>SHOW/RIGHTS/USER=user-name 
OAF>SHOW/RIGHTS/USER=TOM 

OAF>SHOW/ IDENTIFIER/OSER»user-name 
OAF>SHOW/ IDENTIFIER/OSER=SMITH 

OAF>RENAME/IDENTIFIER old-name new-name 
DAF>RENAME/IDENTIFIER PAYROLL NEWPAY 

UAF>REMOVE/ IDENTIFIER id-name 
UAF>REMOVE/IDENTIFIER NEWPAY 

OAF>REVOKE/IDENTIFIER id-name user-name 
aAF>REVOKE/IDENTIFIER PAYROLL TOM 



Creates a general identifier. AUTHORIZE 
gives it a numerical value unless you assign 
it a different value. 

Displays the name of the identifier, its value 
and attributes, and the names of the users 
that hold it. 

Allows a user to hold an identifier. A user 
automatically holds the system-defined 
identifier with the value of his/her UIC. You 
may create an unlimited number of general 
identifiers. 

Displays a list of the general identifiers 
held by TOM, as well as their values and 
attributes. 

Displays the system-defined identifier and 
its UIC value for the user name specified, 
such as SMITH. 

When you rename an Identifier in the rights 
database, the change is reflected in every 
ACE that contains the old identifier. 

Removing an identifier does not remove 
it from any ACE. You must remove the 
identifier from any ACE that references it. 

This is the converse of GRANT/IDENTIFIER. 



Maintaining System Integrity 8- 33 



Restricting User Access to Files 

VMS protection using UlCs 
VMS protection using ACLs 

— Define ACL for a file with ACL editor 

— VMS uses ACLs to determine user access rights to file 

Example 8-6: Defining an ACL for a File 

$ ED IT/ ACL CALCULUS.DAT 

The screen clears. 

(IDENTIFIER=MATH,OPTIONS=NONE, ACCESS=NONE) 

( IDENTIFIER=PROJECT, OPTIONS=NONE, ACCESS=READ+WRITE) 

The user exits the ACL editor. 

$ DIRECTORY/FULL CALCULUS.DAT 

Directory WORK!: [BIERLY.MGR.MGRUSERS] 

CALCULUS.DAT;! File ID: (17807,8,0) 

Size: 1/1 Owner: [VMS,BIERLY] 

Created: ll-JUN-1984 10:36 Revised: ll-JUN-1984 10:37 (3) 

Expires: <None specif ied> Backup: <No backup done> 

File organization; Sequential 

File attributes: Allocation: 1, Extend: 0, Global buffer 

count: 0, No version limit 

Record format: Variable length, maximum 52 bytes 

Record attributes: Carriage return carriage control 

File protection: System:RWED, Owner:RWED, Group: RE, World: 

Access Cntrl List: (IDENTIFIER=MATH,ACCESS=NONE) 

( IDENTIFIER=PROJECT, ACCESS=READ+WRITE ) 

Total of 1 file, 1/1 block. 

$ 
$ 
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Security Auditing 

Security auditing allows the system manager to track certain classes of activities. 
Table 8-13: Event Classes You Can Audit 



Type of Event 



Comments 



ALL 
ACL-requested 

Auttiorlzation file access 

Breai<-in attempts 

Detached 

Dial-up 

Local 

Network 

Remote 



All possible events are audited. 

If a file has an ACL, and AUDIT is requested in that ACL, then 
access to the file is audited. 

All modifications to authorization files {SYSUAF.DAT, NET- 
PROXY.DAT) are audited. 

You can specify all or a combination of the types of break-in 
attempts listed. 



File Access 

Success 

Failure 

BYPASS 

SYSPRV 

GRPPRV 

READALL 



You can track all file access attempts, whether or not they were 
successful. You can also determine whether a process that 
gets access to a file has one of the listed privileges 



Login/Login Failure/Logout 

All 

Batch 

Detached 

Dial-up 

Local 

Network 

Remote 

Subprocess 



You can audit logins, login failures, and logouts from any type 
of process in this list. 



Mount/Dismount 



You can audit each time a mount or dismount request is made. 
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When an audited activity occurs, the system: 

— Sends an alarm message to the operator terminal enabled to receive security messages 

Example 8-7: Security Alarm Message on Console Terminal 

%%%%%%%%%% OPCOM ll-JUN-1988 09:32: :53. 39 %%%%%%%%%%% 
Security alarm on TIDE / Local interactive breakin detection 
Time: ll-JON-1988 09:32:53.38 

PID: 20800513 

User Name: JONES 

Password: ODD 

Dev Name: TTD6: 
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To enable or disable types of security auditing: 

$ SET AUDIT 

To list classes and types of audit currently enabled: 

$ SHOW AUDIT 



Table 8-14: Defining and Listing Audit Classes 



Command/Example 



Comments 



$ SET AOD IT/ALARM - 

_$ /ENABLE= ( class [=keyword]) 

$ SET AODIT/ALARM - 
$ /ENABLE=AOTHORIZATIOH 



You must include the /ALARM qualifier when 
enabling audits. The /ALARM qualifier displays 
audit messages on operator tenninais that are 
enabled to receive security messages. 



$ SET AODIT/ALARM - 

_$ /ENABLE=(BREAKIN=DIALUP) 

$ SET AODIT/ALARM - 

_$ /ENABLE= (ACL, MOUNT) 

$ SET AODIT/ALARM - 

_$ /ENABLE=(BREAKIN=(DIALOP, NETWORK)) 

$ SHOW AUDIT 



You can specify more than one class in a single 
command. 

You can specify more than one keyword for a 
class. 

You can display a list of the classes and types 
of events within classes that are cun-entiy set for 
audit. 
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SYSTEM PROBLEMS 

Two categories of problems 
— Software 



Operator error (incorrect input) 
Programming error (infinite loops, wrong logic) 

— Hardware 

Head crash (on disk) 

Memory failure 

Misalignment of disk or tape drives 

Problems can result in 

— Cornjption of data 

— Loss of data 

— Loss of system resources 

— Loss of computation 
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Software Problems 

When software problems ocx;ur, system manager must 

— Retrain users in proper use of software 

— Correct errors in programs causing problems 

When problems reoccur despite proper attempts at correction, system manager should 

— Document problem 

— Submit Software Performance Report (SPR) 

— Include the following information in the SPR: 

Listings that reveal state of entire system 
Explanations of how to reproduce the problem 
Information in machine-readable form 
Aspects of system environment not apparent from listings 
Personal clues and analyses 
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Hardware Problems 

PtDblems can be 

— Obvious (head crash) 

— Intermittent (memory errors) 

Detect obvious problems by checking system periodically 
• Tools for detecting Intermittent problems 

— Emir logging facility 

— System failure dump facility 

— Hardware diagnosltcs 

— User and operator comments 

— Operator's log file 

— UETP 
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Error Logging Facility 

ERRFMT process records certain activities in system error log file 

— Name of file is SYS$ERRORLOG:ERRLOG.SYS 

— Records activities sucli as 

Device errors 

f^/lemory errors 

Volume mounts and dismounts 

System startups 

— Logs errors for all disk and tape devices 
Can specify which devices will have error logging 

$ SET DEVICE/ERRORLOGGING 

To determine if error logging enabled 

$ SHOW DEVICE /FULL 



Table 8-15: Enabling and Disabling Error Logging 



Operation 



Enabling error logging on a device 
Disabling error logging on a device 



Command FormaVExamples 
(Requires OPER Privilege) 



$ SET DEVICE/ERROR_LOGGING device-name 
$ SET DEVICE/ERR0R_L0GGING_DBB2 : 

$ SET DEVICE/NOERRORJLOGGING device-name 
$ SET DEVICE/NOERROR LOGGING DBB2 : 
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Use Errorlog Report Formatter (ERF) to examine contents of error log file 

$ jaiMiYZE/ERROR_LOG [/qualifiers . . . ] 

Can generate different types of reports by selecting various entries 



Table 8-16: Selecting Entries for an Error Log Report 



Qualifier Comment 



/BEFORE Specifies a range of entries to examine when creating a report. /BEFORE 

/SINCE and /SINCE specify a range within a time inten/al. /ENTRY specifies a 

/ENTRY range using entry numbers. 

/INCLUDE Includes or excludes entries on the basis of device name (MTAO:, DBA1 :, 

/EXCLUDE etc.), device class (DISKS, TAPES, etc.), and entry types (BUGCHECKS, 

DEVICE_ERRORS, MEMORY, VOLUME_CHANGES, etc.) 
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Example 8-8: Portion of Device Error and Volume Changes Report Generated by 
ANALYZE/ERROR 

V A X / V M S SYSTEM ERROR REPORT COMPILED ll-JUN-1988 10:03 

PAGE 25. 
**************************** ENTRY 699. ********************** 

ERROR SEQUENCE 313. LOGGED ON SID 0138700D 

DEVICE ERROR, ll-JUN-1988 05:05:48.64 KA780 REV 7 , SERIAL 13, 

MASSBUS SOB-SYSTEM, UNIT _S0PER$DRA3 : 

CS DS ERl MRl AS DA DT LA SN OF DC HR 

0830 51C0 0180 0008 0000 0101 2014 0040 8609 1000 0002 0002 
**************************** ENTRY 700. ************************** 

ERROR SEQUENCE 314. LOGGED ON SID 0138700D 

DEVICE ERROR, ll-atJN-1988 05:06:39.66 KA780 REV 7, SERIAL 13, 

MASSBOS SUB-SYSTEM, UNIT _SUPER$DRA3 : 

CS DS ERl MRl AS DA DT LA SN OF DC HR 

0830 51C0 0090 OOOC 0000 OllF 2014 07C0 8609 1000 0001 0001 
**************************** ENTRY 701. ************************** 

ERROR SEQUENCE 315. LOGGED ON SID 0138700D 

DEVICE ERROR, ll-JUN-1988 05:08:23.81 KA780 REV 7, SERIAL 13, 

MASSBUS SUB- SYSTEM, UNIT _SUPER$DRA3 : 

CS DS ERl MRl AS DA DT LA SN OF DC HR 

0830 51C0 0180 0008 0000 0200 2014 0000 8609 1000 OOBC OOBC 
**************************** ENTRY 703. ************************** 

ERROR SEQUENCE 318. LOGGED ON SID 0138700D 

DEVICE ERROR, ll-JUN-1988 05:24:24.06 KA780 REV 7, SERIAL 13, 

MASSBUS SUB-SYSTEM, UNIT _SUPERSDRA3 : 

CS DS ERl MRl AS DA DT LA SN OF DC HR 

0830 51C0 0180 0008 0000 0101 2014 0040 8609 1000 0002 0002 
**************************** ENTRY 705. ************************** 

ERROR SEQUENCE 332. LOGGED ON SID 0138700D 

DEVICE ERROR, ll-JUN-1988 07:35:28.76 KA780 REV 7, SERIAL 13, 

MASSBUS SUB- SYSTEM, UNIT _SUPER$DRA1 : 

CS DS ERl MRl AS DA DT LA SN OF DC HR 

0838 51C0 0190 0008 0000 0211 2017 0440 5417 1000 0325 0325 
ANAL/ERR/ OUTPUT=DEV_VOL. DAT/SINCE=9-JUN-1988 00 : 00 : 00 . 00 
/INCLUDE= (DEVICE , VOLUME) /BRIEF 
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ERRFMT distinguishes between two types of errors 

— Soft errors (recoverable errors) 

— Hard errors (unrecoverable errors) 

Not all error log entries represent device or volume failure 

Keep logs (in hard-copy form) for reference during preventive maintenance (PM) 



8- 44 Maintaining System integrity 



System Failure Dump Facility 

System shutdown occurs for two reasons 

— Operator or manager requests shutdown 

— System detects unrecoverable error 

System saves copy of memory in dump file called SYS$SYSTEM:SYSDUMP.DMP 
Use System Dump Analyzer (SDA) to examine contents of dump file 

$ ANALYZE/CRASH 



Table 8-17: Analyzing a System Dump 



Steps in Running SDA 
Utility 



S ANALYZE/CRASH_DMP 
$ SYS$SYSTEM:SYSDUMP 



SDA> command 



SDA> EXIT 



Comments 



Requires: 

Read access to dump file 

Read access to system symbol table 

Value of system parameter VIRTUALPAGEGCNT at least 
1000 pages larger than size of dump file 

If executed in site-specific startup file, value of system 
parameter PQL_DPGFLQUOTA at least 1000 pages larger 
than size of dump file 

If executed elsewhere, value of PGFLQUOTA field In UAF 
record at least 1000 pages larger than size of dump file 

Table 8-1 8 shows typical SDA commands that produce reports 
about the system dump. 

Return to DCL (or parent process). 
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Table 8-18: Types of Reports Generated by the System Dump Analyzer 



Subject of Report Command Format 



Reason system failed, processor regis- show crash 

ters 

Active processes show summary 

Image each process was running at the show summary/ image 

time of the failure 

Current process show process/all 

Process in balance set show process/all [/INDEX=nn] [process-name] 

System device show device device-name 
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System overwrites dump file whenever failure occurs 

Save old dump files and create reports as part of startup procedure 



Example 8-9: Copying the Dump File at Startup and Creating Reports 



Copy Dump file and create listing if system just failed 



$ 

$ 

$ 

$ ANALYZE /CRASH_DOMP SYS$SYSTEM:SYSDOMP .DMP 
COPY LIB$DISK: [ SYSMGR. CRASH ] SAVEDOMP. DMP 
SET ODTPUT LIB$DISK: [SYSMGR. CRASH]SYSDUMP. LIS 



SHOW CRASH 

SHOW STACK 

SHOW SUMMARY 

SHOW PROCESS/PCB/PHD/REG 

SHOW SYMBOL/ALL 

EXIT 



Save dump file 
Create listing file 
containing the 
following information: 



Display crash information 
Show current stack 
List all active processes 
Display all current processes 
Display systerom symbol table 



! Get rid of old system dump files . 
PURGE/KEEP=3 LIB$DISK: [SYSMGR. CRASH] *. * 
PRINT LIBSDISK: [SYSMGR. CRASH] SYSDUMP .LIS 
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Example 8-10: First Page of Report Produced by SDA Command SHOW CRASH 

VAX/VMS 5.0 ~ System Dump Analysis 26-OCT-1988 10:58:27.34 Page 1 



Table of Contents 



System crash information .... 2 

CPU 00 Processor crash information .... 3 
Current process summary .... 4 
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Example 8-11 : Second Page of Report Produced by SDA Command SHOW CRASH 

VAX/VMS 5.0 — System Dump Analysis 26-OCT-1988 10:58:27.34 Page 2 
System crash information 

Time of system crash: 23-JUN-1988 20:48:56.10 

Version of system: VAX/VMS VERSION V5.0-1 
System Version Major ID/Minor ID: 1/0 

VAXcluster node: ROW, a VAXstation II/GPX 

Crash CPU ID/Primary CPU ID: 00/00 

Bitmask of CPUs active/available: 00000001/00000001 

CPU bugcheck codes: 
CPU 00 — INVEXCEPTN, Exception while above ASTDEL or on interrupt stack 



Maintaining System Integrity 8- 49 



Example 8-12: Third Page of Report Produced by SDA Command SHOW CRASH 

VAX/VMS 5.0 — System Duitip Analysis 26-OCT-1988 10:58:27,3 Page 3 
CPO 00 Processor crash information 

CPU 00 reason for Bugcheck: INVEXCEPTN, Exception while above ASTDEL or on 
interrupt stack 

Process currently executing on this CPU: SWAPPER 

Current IPL: 8 (decimal) 

CPU database address: 808BC000 



General registers : 



RO 


= 


00000008 


Rl 


= 


00080000 


R2 = 


00000002 


R4 


= 


B4001FDC 


R5 


= 


8088CA20 


R6 = 


00000000 


R8 


= 


0000018B 


R9 


= 


0000003E 


RIO = 


80ABA06C 


AP 


= 


80ABA070 


FP 


= 


00000000 


SP = 


801C5520 



R3 = 8045A060 
R7 = 00000005 
Rll = 00000169 
PC = 8019B1FE 



PSL = 00080009 



Processor registers: 



POBR 


= 


8061EE00 


SBR 


ss 


006E9800 


POLR 


= 


OOOOOEIO 


SLR 


as 


00005700 


PIBR 


= 


7F979400 


PCBB 


= 


005C5A20 


PILR 


= 


001FFF7F 


SCBB 


= 


006E1600 


TODR 


== 


6A0DCC69 


SYSTYPE= 


01010000 


ISP 


ss 


808BD200 








KSP 


= 


801C5520 








ESP 


= 


00000000 








SSP 


= 


00000000 








OSP 


= 


00000000 









ASTLVL = 00000004 
SISR » 00000000 
IOCS = 00000040 
SID = 08000000 



No spinlocks currently owned by CPU 00 
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Use the following SDA command to 

— Display a list of users working on the system when it failed 

— List images that were running at the time of failure 

SHOW SOMMARY/IMAGE 



Example 8-13: 



Fourth Page of Report Produced by SDA Command SHOW SUM- 
MARY/IMAGE 



VAX/VMS 5.0 — System Dump Analysis 
Current process summary 



26-0CT-1988 10:58:27.34 



Page 4 



Extended 

— PID ~ 

25400041 

25400046 

25400047 

25400048 

25400049 

2540004A 

2540004B 

2540004D 

25400050 

25400051 

25400052 

25400053 

25400054 

25400055 
25400056 



Indx Process name 



Username 



State 



Pri 



PCB 



PHD 



Wkset 



0001 SWAPPER 

0006 EERFMT SYSTEM 
$11$DUA13: [SYS2.SYSC0MM0N.] 

0007 CACHE_SERVER SYSTEM 
$11$DUA13 : [SYS2 . SYSCOMMON. ] 

0008 CLUSTER_SERVER SYSTEM 
$11$DUA13: [SYS2. SYSCOMMON.] 

0009 OPCOM SYSTEM 
$ll$DaA13: [SYS2. SYSCOMMON. ] 
OOOA JOB_C0NTR0L SYSTEM 
$1 1$D0A13 : [ SYS2 . SYSCOMMON . ] 
OOOB CONFIGURE SYSTEM 
S11$DUA13: [SYS 2. SYSCOMMON.] 
OOOD SMI SERVER SYSTEM 
$11SDUA13: [SYS2.SYSCO[«10N.] 

0010 NETACP DECNET 
$ 1 1$DUA13 : I SYS2 . SYSCOMMON . ] 

0011 VWS$DISPLAYMGR SYSTEM 
$11$DUA13: [ SYS2 . SYSCOMMON . ] 

0012 VWS$EMULATORS SYSTEM 
$11$DUA13: [SYS 2. SYSCOMMON. ] 

0013 REMACP SYSTEM 
$11$DUA13: [SYS 2. SYSCOMMON.] 

0014 AUDIT_SERVER SYSTEM 
$11$DUA13: [SYS2. SYSCOMMON.] 

0015 SYSTARTDP SYSTEM 

0016 UIS$SYS FONT LD SYSTEM 



CUR 16 801C5198 

HIB 10 8065B470 
[ SYSEXE ] ERRFMT . EXE ; 1 

HIB 16 806545F0 
[SYSEXE] FILESERV.EXE; 1 

HIB 14 80654B70 
[ SYSEXE ]CSP. EXE ;1 

HIB 7 8065F3C0 
[ SYSEXE ] OPCOM . EXE ; 2 

HIB 8 8065F540 
[ SYSEXE] JOBCTL . EXE ; 3 

HIB 8 8067EFeO 
[ SYSEXE ] CONFIGURE . EXE ; 3 

HIB 13 8067F100 
[ SYSEXE] SMI SERVER . EXE; 3 

HIB 14 806892B0 
[ SYSEXE ] NETACP . EXE ; 1 

LEF 7 8068A920 
[SYSEXE] UISBG.EXE; 4 

HIB 5 8068B200 
t SYSEXE] VWS$EMaLATORS . EXE ; 4 

HIB 8 8068F900 
[ SYSEXE ] REMACP . EXE ; 1 

HIB 8 806D6240 
[SYSEXE] AUDIT_SERVER .EXE; 88 

COM 9 806D64D0 

COM 9 8065D190 



801C5000 
SOeSEAOO 



108 


808EDAOO 


101 


80905200 


216 


8091CAOO 


142 


80934200 


201 


8094BA00 


147 


80963200 


534 


809A9AOO 


861 


809C1200 


260 


8O9D8A0O 


30 


80992200 


34 


8O97AA0O 


261 


809F0200 
808D6200 


296 
221 
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Hardware Diagnostics 

Isolate and diagnose problem 

Field Service engineer runs diagnostics on site, or from remote location 

Two types of diagnostics 

— On-line 

— Standalone 

On-Line Diagnostics 

Run on hardware; not essential for the execution of VMS 
DIGITAL Field Service engineer brings diagnostics 
FIELD account must be available to run diagnostics 
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standalone Diagnostics 

Use when Field Service must diagnose components essential for the execution of VMS 
Prepare for standalone diagnostics 

— Shut down system 

— Remove system disk and other sensitive volumes 

— Provide access to console terminal and console device 

Remote Diagnostics 

Run from DIGITAL Diagnostics Center (DDC) 

— System must have remote diagnosis port 

— Set key switch on front panel to "REMOTE" 
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User and Operator Comments 

Create log book containing 

— User comments 

— Backups done 

— Sliift cliange information 

— Cleaning done 

— Unusual events 

— Warnings and notes for other operators 

— Work left from previous shift 

— Specific hardware or software problems 

Operator's Log File 

• Operator log file {SYS$MANAGER:OPERATOR.LOG) contains 

— REQUEST and REPLY communication 

— Communication between operating system and operator 

— Messages regarding enabled or disabled operator terminals 

— Time of day (every half hour) 

— Off-line messages indicating device taken off-line 
To close a log file and open a new one: 

$ REPLY/LOG 

Operator log is text file (examine using PRINT or TYPE commands) 
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UETP 



Run User Environment Test Package (UETP) to test how hardware and software work 
together 

UETP is not a replacement for diagnostics or system exercisers 

UETP does not identify the cause of a problem 
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SUMMARY 

System manager must provide proper care for devices, media, and computer room 

— Customer performs some maintenance activities 

— DIGiTAL Field Service performs sensitive activities 
System manager is responsible for software maintenance 

— Install updates and upgrades 

— Ensure integrity of critical system files 

— Backup system and user volumes regularly 
System manager is also responsible for security 

— Computer room 

— Dial-up lines 

— System files 

— Media storage 

— Encourage use of protection codes and ACLs 

— Auditing critical security situations 
Capabilites for ensuring security on disk volumes 

— Erase-on-Delete 

— Erase-on-Allocate (higiiwater marking) 
Password security affected by proper use of AUTHORIZE 

— System password 

— Secondary user passwords 

— Password expiration 

— Minimum length passwords 

— Forced use of system-generated passwords 



8- 56 Maintaining System Integrity 



Terminal (device) security 

— SET PROTECTION/DEVICE 

— SET TERMiNAL/SECURE_SERVER 

Use UIC and ACL protection to enhance security and sharing among users 
Security auditing 

— SET AUDIT to set audit events 

— SHOW AUDIT to view audit events 

— Beware of auditing everything (performance penalty) 
Types of system problems 

— [Hardware 

— Software 

Error Logging Facility 

— ERRFMT process logs errors to SYS$ERRORLOG:ERRLOG.SYS 

Process initiated at system startup 

— Can selectively set devices for error logging (SET DEVICE/[NO]ERROR_LOGGiNG) 

— Use ERF to examine contents of error log file (ANALYZE/ERROR_LOG) 

Can select particular device errors 
Use SDA to examine system failure information (ANALYZE/CRASH_DUMP) 
Hardware diagnostic facilities 

— Performed by DIGITAL Field Service personnel 

— Can be performed locally or remotely 
User Environment Test Package (UETP) 

— Tests how hardware and software work together 

— Not a replacement for diagnostics 

— Cannot identify cause of problem 
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MODULE 9 
MONITORING THE SYSTEM 
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INTRODUCTION 

The VMS operating system provides many tools for monitoring system beliavior. Using these 
tools, you can examine the activity of VMS processes and the utilization of system resources. 
If user demands on system resources become too great, system performance will become 
unsatisfactory. 

The primary factor limiting VMS perfonnance is hardware resources - especially physical 
memory and disl< storage. Hardware resources that are inadequate for the workload generally 
provide poor performance, regardless of any other efforts to Improve performance. 

When the system is installed and started up for the first time, it detemiines the amount of 
physical memory and disk storage available. It then uses this information to compute appropriate 
sizes for its data structures and work files. If additional physical resources are added to the 
system to improve its performance, you can have the VMS system recompute these sizes to 
take advantage of the new resources. 

You are not expected to configure or tune a system to match an application or workload 
using the information presented in this module. Another course, VMS System Performance 
Managemerjt, treats the topic of system performance in greater detail. You are simply expected 
to use the commands and utilities discussed in this nradule to monitor the perfonnance of your 
system. Eventually, as you t>ecome familiar with your system and performance management In 
general, you can use these same tools to help you improve the performance of your system. 

OBJECTIVES 

Monitor the system 

Modify system parameters to reflect a change in system resources 



RESOURCES 

1 . Guide to Setting Up a VMS System 

2. VMS System Generation Utility Manual 

3. Guide to Maintaining a VMS System 

4. Guide to VMS Performance Management 

5. VMS Monitor Utility Manual 

6. VMS Accounting Utility Manual 

7. VMS DCL Dictionary 
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MONITORING SYSTEM ACTIVITY 



Table 9-1 : System, Process, and Device Monitoring 



Information Displayed 



Command or Utility 



Overview of the processes on the system 

Overview of print queues 

Overview of batch queues 

Overview of mounted disk and tape 
volumes 

Demands on system resources 

Error counts for CPU, memory, and 
physical devices 



$ SHOW SYSTEM 
$ SHOW QUEUE /DEVICES /ALL 
$ SHOW QUEUE /BATCH /ALL 
$ SHOW DEVICES/MOUNTED 

$ MONITOR 

$ SHOW ERROR 



Interactive users, terminal names, and 
process IDs 

Information about current activities of a 
certain process 

information about user limits and privileges 

Information about disk space allowances 

Consumption of resources by processes 
Information about devices and volumes 



$ SHOW USERS 

$ SHOW PROCESS /CONTINUOUS /ID=pld 
$ SHOW PROCESS /ALL /ID=pld 

$ RUN SYS$SYSTEM:AUTHORIZE 

$ SHOW QUOTA /USER=ulc 
$ RUN SYS$SYSTEM:SYSMAN 

$ ACCOUNTING 

$ SHOW DEVICE 
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Monitoring Active Processes 

List all processes on the system 

$ SHOW SYSTEM 

List information about a single process 

— In same UiC group {requires GROUP privilege) 
$ SHOW PROCESS process-name 

— In any UIC group (requires WORLD privilege) 
$ SHOW PROCESS /ID=pid 

Process scheduling based on software process priority 
Process scheduling states 

— Current process 

— Wait states 

COM (computable) process 
Outswapped process 
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Example 9-1 : Output from the SHOW SYSTEM/FULL Command 



HXB 



HIB 



HIB 



COM 



16 



8 



8 



10 



9 



VAX/VMS V5.0 on node SPIDER 30 -APR 

Pid Process Name State Pri 

21200081 SWAPPER HIB 

[ GROUP 1, SYSTEM] 
21200086 ERRFMT HIB 

[1,6] 

21200089 OPCOM LEF 

( GROUP 1, SYSTEM] 
2120008A JOB_CONTROL HIB 

( GROUP 1, SYSTEM] 
2120008C NETACP HIB 

[ GROUP 1, SYSTEM] 
2120008E REMACP HIB 

[ GROUP 1, OPERATOR] 
2120C08F SYMBIONT_0001 HIB 

[GROUPl, SYSTEM] 

21200090 SYMBIONT_0002 
[GROUPl, SYSTEM] 

21200092 SYMBIONT_0004 

[GROUPl, SYSTEM] 
2120009B VAXsim_Monitor HIB 

[1,6] 
2120009E VPA_DC 

[GROUPl, SYSTEM] 
21200524 BATCH_1036 

[ GROUP 1 , OPERATOR] 
212006AC MATTHEWS IiEF 

[GROUPl 1 , MATTHEWS ] 
21200731 MATTHEWS_1 CUR 

[ GROUP 1 1 , MATTHEWS ] 
21200635 SERVER_0635 LEF 

[DECNET] 
212007CC MARSH LEF 

[GROUP 11, MARSH] 
212004D3 NOTES$0007_0* HIB 

[ GROUP 1 1 1 , NOTES S SERVER ] 



8 



15 



1988 16:10 
I/O 



:15.13 Uptime 
CPU 
00:01:03.47 


3 00:21:30 
Page fits Ph. Mem 





3221 





00:00:38.08 


70 


111 




1393 





00:00:19.59 


4844 


81 




81129 





00:24:52.39 


200 


342 




35622 





00:38:08.93 


5965 


5640 




467 





00:00:02.05 


78 


65 




7223 





00:05:23.34 


29327 


69 




16 





00:00:13.32 


193 


70 




46137 





00:29:22.24 


66427 


77 




642 





00:00:11.49 


361 


255 




2870 





00:10:15.45 


234 


323 




7137740 


1 


00:01:43.25 


381 


346 


B 


7973 





00:01:07.32 


4387 


1500 




177 





00:00:02.28 


433 


269 


S 


369 





00:00:09,17 


1732 


267 


N 


28383 





00:09:42.82 


53227 


300 




1537 





00:00:19.87 


7787 


67 


N 
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Table 9-2: System States 


Name of State and 


Probably 


Possible 




Abbreviation OK 


OK 


Problem 


Definition of State 


Computable 
COM/COMO 


X 




Available to use tlie proces- 
sor 


Common Event Flag 

Walt 

CEF/CEFO 


X 




Waiting for something to 
happen in another process 


Collided Page Wait 
COLP 




X 


Waiting for the system 


Current X 
CUR 






Using the processor 


Free Page Wait 
FPG 




X 


Waiting for physical memory 


Hibemating 
HIB/HIBO 


X 




Intentionally doing no worl< 


Local Event Flag Wait 
LEF/LEFO 


X 




Waiting for something 
to happen in the image 
(typically I/O completion) 


Mutex / Misc Resource 
MWAIT or RWxxx 




X 


Waiting for a system re- 
source 


Page Fault Wait 
PFW 




X 


Waiting for the system 


Suspended 
SUSP/SUSPO 


X 




Deliberately prevented from 
executing 
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Monitoring System Processes 

System processes 

— Created by VMS at system startup 

— Perform certain operating system functions 



Table 9-3: System Processes 



Process Name 



Purpose 



SWAPPER 

ERRFMT 
JOB_CONTROL 

OPCOM 

SYMBIONT_nnnn 

xxxACP 



Maintains adequate free memory; transfers processes between physical 
memory and disk 

Records device en-ors in file on disk 

Manages print jobs, batch jobs, interactive processes, and process 
accounting 

Transmits and records user requests and operator replies 

Prints files on line printers 

Manages transmission of data to and from tapes, interconnected 
computers, and some disks 



Table 9-4: Results of System Process Deletion 



Process Name 



Effect of Deletion 



SWAPPER 

ERRFMT 

JOB_CONTROL 

OPCOM 

SYMBIONT_nnnn 

xxxACP 



(Cannot be deleted) 

No device errors recorded 

Users cannot log in and queues do not function 

No user/operator communication 

Printers may not print 

System slows down, possibly stops entirely 



• To restart ERRFMT OPCOM, or JOB_CONTROL: 

1. Log in as SYSTEM 

2. Run STARTUP.COM 

3. Enter process-image name as P1 parameter, for example: 

$ @ SYS $ SYSTEM: STARTUP OPCOM 
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Obtaining Information About a Device 

To display information about devices on your system: 
$ SHOW DEVICES 



Table 9-5: SHOW DEVICES Command 



List of all devices on tlie system 

Amount of unused space on a mounted disl< 
volume 

Characteristics or error count on a specific 
device 

Owner of an allocated device 

Names of all open files on a volume (You need 
SYSPRV and WORLD privileges to display 
complete information) 



$ SHOW DEVICES 

$ SHOW DEVICES /MOUNTED 

$ SHOW DEVICES device-name 

$ SHOW DEVICES /FULL device-name 
$ SHOW DEVICES /FILES device-name 



Example 9-2: SHOW DEVICES /MOUNTED Output 



$ SHOW DEVICES /MOUNTED 



Device 


Device 


Error 


Volume 


Free 


Trans Mnt 


Name 


Status 


Count 


Label 


Blocks 


Count Cnt 


DJAl: 


Mounted 


1 


GONZO 


44418 


1 3 


DUA2: 


Mounted 





ANIMAL 


162004 


1 3 


DUA3: 


Mounted 





OSCAR 


2568 


1 3 
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Example 9-3: SHOW DEVICES /FULL Output 

$ SHOW DEVICE/FULL DJAO: 

Disk DJAO:, device type RA.60, is online, mounted, file-oriented device, 
shareable, error logging is enabled. 

Operations completed 75804 

Owner DIG [1,1] 

Dev Prot S :RWED,0:RWED, G:RWED, W:RWED 
Default buffer size 512 

Sectors per track 42 

Tracks per cylinder 4 



Error count 


69 


Owner process 


Mtt 


Owner process ID 


00000000 


Reference count 


63 


Total blocks 


400176 


Total cylinders 


2382 


Volume label 


"BUNNY SYS" 


Cluster size 


2 


Free blocks 


27618 


Extend quantity 


5 


Mount status 


System 


Extent cache size 


64 


File ID cache size 


64 


Quota cache size 






Relative volume number 
Transaction count 
Maximum files allowed 
Mount count 





140 

66696 

1 



Cache name "BONNY$DJA0 :XQP CACHE" 
Maximum blocks in extent cache 2761 
Blocks currently in extent cache 1246 
Maximum buffers in FCP cache 129 

Volume status: subject to mount verification, write-through caching enabled. 
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Monitoring Memory Resources 

System performance is strongly dependent on amount of physical memory. 
• SHOW MEMORY command displays information about system's physical memory. 



Example 9-4: SHOW MEMORY Output 

S SHOW MEMORY 

System Memory Resources on 30-APR-1988 16:39:33.81 
Physical Memory Usage (pages) : Total 
Main Memory (16.00Mb) 32768 

Slot Osage (slots) : Total 

Process Entry Slots 30 

Balance Set Slots 27 

Fixed-Size Pool Areas (packets) : Total 

Small Packet (SRP) List 640 

I/O Request Packet (IRP) List 328 

Large Packet (LRP) List 39 

Dynamic Memory Osage (bytes) : Total 
Nonpaged Dynamic Memory 643584 

Paged Dynamic Memory 205312 

Paging File Usage (pages) : 

DISK$COCOA_SYS : [SYSO . SYSEXE] SWAPFILE . SYS 

DISK$COCOA SYS: [SYSO. SYSEXE] PAGEFILE. SYS 



Of the physical pages in use. 



Free 


In Use 


Modified 


23954 


8516 


298 


Free 


Resident 


Swapped 


11 


19 





10 


17 





Free 


In Use 


Size 


102 


538 


96 


96 


232 


176 


19 


20 


1648 


Free 


In Use 


Largest 


36512 


607072 


30272 


75600 


129712 


74480 


Free 


Reservable 


Total 


15000 


15000 


15000 


23636 
srmanen 


-6941 
tlv allocatec 


30000 
1 to VMS. 
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Table 9-6: Effect of Memory Sizes on Performance 



Item 



Description 



Problem 



Free Physical Memory 



Free Process Entry Slots 



Free Balance Set Slots 



Fixed-size Pool Areas (Pack- 
ets) 



Free Paged Dynamic Mem- 
ory, Free Nonpaged Dy- 
namic Memory 

Free Swap File Pages 



Free Page File Pages 



Size of the free page list (the 
number of pages available 
for processes that need 
memory) 

The number of additional 
processes the VMS system 
can create 

The maximum number of 
additional processes the 
VMS system can swap in 

Nonpaged memory in sys- 
tem space, used primarily 
for I/O 

The amount of dynamic 
memory left for the system 
to use 

The number of pages avail- 
able on disk for swapping 

The number of pages avail- 
able on disk for paging 



If less than a few hundred 
blocks, swapping occurs. 



If zero, no users can log in 
and no new processes can be 
created. 

If zero, then swapping occurs 
even if there are enough free 
pages available. 

If any item is zero, the system 
tries to increase it. Enter 
the SHOW MEMORY/FULL 
command for more information. 

If too small, system response 
deteriorates. 

If too small, then VMS uses 
page file instead (can signifi- 
cantly reduce performance). 

If too small, processes wait in 
MWAIT state. System prints 
a message on the console 
terminal when the page file 
reaches 60% and 90% full. 



Monitoring Print and Batcli Queues 



To examine queues on the system: 
$ SHOW QUEUE/DEVICES/ALL 
$ SHOW QUEUE/BATCH/ALL 
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MONITOR Utility 



Display information about system resource usage 
$ MONITOR class-name(s)[/qualifiers] 
MONITOR commands can: 

— Display a class of information 

— Set default classes 

— List defaults 

— Execute command procedures 

— Obtain help 

— Exit from the utility 

Unlike most utilities that display system infomnation, MONITOR can: 

— Display several classes of information alternately 

— Summarize statistics over a long period of time 

— Record infonnation in a disk file 

— Play back information that it has recorded 

Example 9-5: Invoking the MONITOR Utility 

$ MONITOR 
MONITOR> 



Monitoring the System 9-13 



Table 9-7: MONITOR Class Names 


Class Description 


Class Name 


All classes 

Brief display of system status in a cluster 

DECnet-VAX statistics 


ALL_CLASSES 

CLUSTER 

DECNbl 


Disk 1/0 statistics 

Distributed lock management statistics 


DISK 
DLOCK 


File system statistics 

File system cache statistics 


FCP 
FILE_SYSTEM_CACHE 


System I/O statistics 

Lock management statistics 

Time spent in each processor mode 

Disk server statistics in cluster 


10 

LOCK 
MODES 
MSCP 


Page management statistics 

Space allocation in nonpaged dynamic memory 

Statistics on all processes 

RMS file I/O statistics 


PAGE 
POOL 

PROCESSES 
RMS 


System communication services statistics 

Number of processes in each scheduler stats 

Brief display of general system status (includes 
information displayed in other classes) 


SCS 
STAI bS 
SYSTEM 
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Example 9-6: MONITOR Screen Display of the PAGE Class 



$ MONITOR PAGE 



VAX/VMS Monitor Utility 

PAGE MANAGEMENT STATISTICS 

on node SPIDER 

30-APR-1988 17:04:35 



Page Fault Rate 
Page Read Rate 
Page Read I/O Rate 
Page Write Rate 
Page Write I/O Rate 

Free List Fault Rate 
Modified List Fault Rate 
Demand Zero Fault Rate 
Global Valid Fault Rate 
Wrt In Progress Fault Rate 
System Fault Rate 

Free List Size 
Modified List Size 



CDR 



AVE 



MIN 



MAX 



2.33 


2.33 


2.33 


2.33 


6.33 


6.33 


6.33 


6.33 


1.00 


1.00 


1.00 


1.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


1.00 


1.00 


1.00 


1-00 


0.00 


0.00 


0.00 


0.00 


0.33 


0.33 


0.33 


0.33 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


0.00 


78757.00 


78757.00 


78757.00 


78757.00 


775.00 


775.00 


775.00 


775.00 



NOTE 



Each value is updated every few seconds. 
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Table 9-8: MONITOR PROCESSES Class Qualifiers 



Description 



Qualifier 



Top buffered I/O users 
Top direct I/O users 
Top CPU users 
Top page fault users 



/TOPBIO 
/TOPDIO 
/TOPCPU 
/TOPFAULT 



Example 9-7: MONITOR PROCESSES /TOPCPU Screen Display 

S MONITOR PROCESSES /TOPCPU 

VAX/VMS Monitor Utility 
TOP CPU TIME PROCESSES 
on node SUPER 
30-APR-1988 17:13:54 

25 50 75 
+ ____ + ____ + ____ + . 
7g ******************************* 



21200524 BATCH_1036 
21200646 JKMARTIN 
2120083F MATTHEWS 1 



100 

- -+ 



9 

3 



*** 



+ - 



+ - 



+ - 



-+ 



NOTE 



Bar graph is updated every few seconds. 
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Example 9-8: MONITOR SYSTEM Screen Display 

Node: OTHER VAX/VMS Monitor Utility 30-APR-1988 17:18:41 

Statistic: CURRENT SYSTEM STATISTICS 

Process States 
+ CPD Busy (96) -+ LEF: 5 LEFO: 

I ************************ I HIB: 19 HIBO; 

CPU + • + 100 COM: 2 COMO: 

I ************** I PFW: Other: 1 

+.- _+ MWAIT: 

Cur Top: BATCH_1036 (56) Total: 27 

+ Page Fault Rate (108) -+ + Free List Size (76414) -+ 
11*************************1 I ********************** I 89K 

MEMORY + + 100 + + 

1**************************1 i ********* I 2621 

+ + + Modified List Size (917) + 

Cur Top: MARSH (106) 

+ Direct I/O Rate (52) -+ + Buffered I/O Rate (4) -+ 

I ********************** I I I 

I/O + + 60 + + 150 

I ******************** I I I 

+ + + + 

Cur Top: BATCH_1036 (47) Cur Top: MARSH (4) 
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Information on a Specific Process 

Display information about a particular process 

$ SHOW PROCESS/CONTINUOUS [/ID=proc-id] [proc-name] 

$ SHOW PROCESS/CONTINUOUS/ID=process_id 

— Requires WORLD privilege to show Information about a process in a different UIC 
group 

— To exit, type E 

NOTE 
System updates information every few seconds. 

Example 9-9: Output from SHOW PROCESS /CONTINUOUS 

$ SHOW PROCESS /CONTINUOUS /ID=7CC 

Process MARSH 



State LEF 

Cur /base priority 9/4 

Current PC 7FFEE44C 

Current PSL 03C00004 

Current user SP 7FEF9EBC 

PID 000007CC 

OIC [GROUP 11, MARSH] 



$1$D0A0: [SYSl.SYSCOMMON.] [SYSEXE] MAIL. EXE 





17:27:29 


Working set 


861 


Virtual pages 


3995 


CPU time 


00:10:43.48 


Direct I/O 


3691 


Buffered I/O 


26600 


Page faults 


58835 


Event flags 


E0000043 




D4000002 
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Interactive Users 

To list interactive processes and thieir terminal device codes: 
$ SHOW USERS 

Example 9-10: Output from SHOW USERS 

$ SHOW OSERS 

VAX/VMS Interactive Users 
l-MAY-198e 12:27:52.92 
Total number of interactive users = 6 



Username 


Process Name 


PID 


Terminal 




CASALS 


CASALS 


21000152 


VTA22: 


LTA9: 


HEIFETZ 


HEIFETZ 


210001A6 


VTA181: 


LTA12 


KEEUTZER 


KREOTZER 


210006A8 


VTA178: 


TTA3: 


PAGANINI 


PAGANINI 


2100033D 


RTAl: 




PIATIGORSKY 


PIATIGORSKY 


21000544 


VTA176: 


LTA8: 


ROSE 


ROSE 


21000A6C 


VTA26: 


LTA12 
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Collecting Process Information with the Accounting 
Utility 

• System Accounting File: SYS$MANAGER:ACCOUNTNG.DAT 

• Contents are used to: 

— Record system activity 

— Charge for system resources used 

— Analyze relationship between system activity and performance 

— Monitor system activity for security reasons 

Can be read by VIMS Accounting utility to produce fomriatted reports 

Can be read by user-written processing utility 

Input/output control by system manager with DCL commands: 

— SET ACCOUNTING 

— ACCOUNTING 

JOB_CONTROL writes records to ACCOUNTNG.DAT when the following events occur: 

— Process deletion/logout 

— Print job completion 

— Login failure 

— Batch job completion 
Contents of accounting record 

— System resource usage 

— Identity of resource user 



9- 20 Monitoring the System 



Example 9-11 : Accounting Record, Full Format 

INTERACTIVE Process Termination 



Username : 
Account : 
Process ID: 
Owner ID: 
Terminal name: 
Remote node addr: 
Remote node name : 
Remote ID : 
Queue entry: 
Queue name: 
Job name : 
Final status texts 

Page faults: 
Page fault reads; 
Peak working set: 
Peak page file: 



VAL 

PERSONNEL 

212007CC 

VTA85: 



OIC: 

Finish time: 

Start time: 

Elapsed time: 

Processor time: 

Priority: 4 

Privilege <31-00>: 1O14CO0O 

Privilege <63-32>: 00000000 

Final status code: 00000001 



[PERSONNEL, VAL] 

30-APR-1988 17:46:43.23 

30-APR-1988 10:15:36.40 

07:31:06.83 

00:11:37.22 



%SYSTEM-S-NORMAL, normal successful completion 



65489 Direct 10: 

2383 Buffered 10: 

1500 Volumes mounted: 

7226 Images executed: 



4091 

28753 



379 
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Recording is enabled by default (except image activity). 

SET ACCOUNTING command controls which types of records are written to AC- 
COUNTNG.DAT by JOB_CONTROL 

— BATCH 

— INTERACTIVE 

— MESSAGE 

— LOGIN_FAILURE 

— PRINT 

— PROCESS 

— IMAGE 



Table 9-9: Recording Accounting Information 



Operation 



Command Format and Examples 



Enable the recording of all accounting 
information except image accounting 

Disable the recording of all accounting 
information 

Enable the recording of accounting infor- 
mation selectively 

Disable the recording of accounting infor- 
mation selectively 

Close the current accounting file and open 
a new one 



$ SET ACCOUNTING / ENABLE 

$ SET ACCOUNTING /DISABLE 

$ SET ACCOUNTING /ENABLE= (record-type [, . . . ] ) 
$ SET ACCOUNTING /ENABLE= (PRINT, LOGIN_FAILURE) 

$ SET ACCOUNTING /DISABLE= (record-type [, . . . ] > 
$ SET ACCOUNTING /DISABLE= (LOGIN_FAILURE) 

$ SET ACCOUNTING /NEW_FILE 
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Using the Accounting Utility to Produce Reports 



Accounting utility 

— Reads system accounting file 

— Produces reports 
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Figure 9-1 : System Accounting File 




NEW RECORDS ARE 

ADDED TO END 

OF FILE 



SYSTEM ACCOUNTING FILE 
SYS$MANAGER: ACCOUNTNG.DAT" 




$ 

$ ACCOUNTING- 

_$ /TYPE=PROCESS- 

_$ /PROCESS=INTERACTIVE- 

_$ /OUTPUT=LPA0: 

$ 




USER CREATES REPORT 



TTB X0812 88 
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Qualifiers to DCL command ACCOUNTING control 

— Wliich accounting records to analyze 

— Which details to disclose 

Full 

Brief 

Summary 

— Which order to display records 

Full format accounting report (Example 9-11) generated by: 

$ ACCOUNTING /FULL /TYPE=PROCESS /PROCESS= INTERACTIVE 

Brief format accounting report (Example 9-12) generated by: 

$ ACCOUNTING /SINCE=27-APR-1988 :07 !30 /BEF0RE=27-APR-1988 :08 :00 



Example 9-12: Accounting Records, Brief Format 



Date / Time 



Type 



Subtype 



Username 



ID 



Source 



Status 



27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 
27-APR- 



1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 
1988 



07:32 
07:42 
07:56 
08:01 
08:02 
08:02 
08:06 
08:09 
08:12 
08:13 
08:15 
08:20 
08:26 
08:28 



:00 PROCESS 
:47 PROCESS 
:07 PRINT 
:57 PROCESS 
:00 PROCESS 
:42 PROCESS 
:53 PROCESS 
:37 PROCESS 
;23 PRINT 
:48 PROCESS 
!03 PRINT 
:51 PROCESS 
:50 PROCESS 
!l0 PRINT 



NETWORK 
NETWORK 

NETWORK 

NETWORK 

NETWORK 

INTERACTIVE 

NETWORK 

INTERACTIVE 

NETWORK 
NETWORK 



DECNET 

DECNET 

BECKER 

DECNET 

DECNET 

DECNET 

KENT 

DECNET 

JOHNSTON 

PIANTEDOSI 

JOHNSTON 

DECNET 

DECNET 

BECKER 



20801B24 
20801AA5 
2080009B 
20801A28 
20801A29 
20801B2A 
2080182B 
20801AAC 
20201448 
208017AF 
20201448 
20801BAD 
208015B0 
2080009B 



HARDY 
SCDGAT 

ZEKE 

HARDY 

HARDY 

VTA270: 

SCDGAT 

PARROT 

SCDGAT 
UCOUNT 



10000004 
10000004 
00040001 
10000004 
10000004 
10000004 
10000001 
10000004 
0000002C 
10000001 
00040001 
10000004 
10000004 
00040001 
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To generate the summary format accounting report (Example 9-13) 

S ACCOUNTING /SINCE=27-APR-1988 :05:00 /BEFORE=27-APR-1988:10!00 
_$ /TYPE=PROCESS /SOMMARY= (HOUR, USER) /REPORT=BUFFERED_IO 

Example 9-13: Accounting Report, Summary Format 



HH Username 


Buffered 




I/O 


05 DECNET 


2206 


06 DECNET 


2052 


06 NOTES$SERVER 


166 


07 DECNET 


1384 


08 CT.RRRY 


507 


08 DECNET 


2984 


08 HENDRICKS 


18525 


08 JONES 


3044 


08 KENT 


860 


08 LMARSH 


745 


08 PIANTEDOSI 


217 


09 BAKER 


285 


09 BECKER 


113 


09 DECNET 


9657 


09 FRIEDMAN 


407 


09 JOHNSTON 


239 


09 KFJiMANSON 


963 


09 MATTHEWS 


1025 


09 NAGLE 


1125 


09 SYSTEM 


6084 


09 YWOSKOS 


135 
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Table 9-10: Some Qualifiers Used to Specify Content of Accounting Report 



Qualifier 



Comments 



/BEFORE=time 

/SINCE=time 

/QUE U E=queue-name 

/JOB=job-name 

/ENTRY=entry-number 

/PRIORITY=priority 

/ACCOUNT=account-name 

/UIC=uic 

/USER=user-name 

/TERM iNAL=terminal-name 

/PROCESS=process-type 

/TYPE=record-type 



Selects records dated before specified time 

Selects records dated after specified time 

Name of print or batcti queue 

Name of job sent to queue 

Number generated wlien job was entered on queue 

Base priority of user— hielps to create report on all interactive 
users or all real-time users 

Specified in UAF record 

Specified in UAF record 

Specified in UAF record 

Device name of terminal 

BATCH, INTERACTIVE, DETACHED, and others 

PRINT, LOGFAIL, PROCESS, and others 



Table 9-11: Qualifiers Affecting Output Format of Accounting Report 



Qualifier 



Comments 



/TITLE=title 
/REPORT=item 

/SORT=item 

/SUMMARY=item 

/FULL 

/OUTPUT=fiie-spec 
/LOG 

/REJECTED=file-spec 
/BINARY 



Specifies text to be printed at the top of report 

Includes specified items in a summary report (default is 
REPORT=RECORDS) 

Sorts records In ascending or descending order by one or more 
items 

To produce summary report, grouped by the items you specify 
in ascending order (default is USER) 

To display all data in selected records. Do not use with /BINARY 
or /SUMMARY 

Sends the output to a specified file (default is SYS$OUTPUT) 

Displays log messages about progress of utility 

Saves records not selected in a file in binary format 

Produces output in binary rather than ASCII format — useful for 
malting a smaller accounting file from which to produce multiple 
reports 
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Default accounting file can become quite large 

Rename default file periodically or create historical accounting files with partial accounting 
information only 



Example 9-14: Selecting Accounting Files 

$ ACCOUNTING /TYPE=PRINT 

$ 

$ ACCOUNTING /TYPE=PRINT SYS$MANAGER:ACC0_8 8_JON_12.DAT 

$ 

$ ACCOUNTING /TYPE=PRINT syS$MANAGER:ACCO_88_JUN*.DAT 
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Table 9-12: Creating an Accounting Report 



Operation 



Command Element Comment 



Step 1 : Select an 
accounting file. 

Step 2: Select the 
type of record to 
analyze. 

Step 3: Select 
records to ana- 
lyze, based on the 
contents of specific 
fields in the records. 

Step 4: Sort the 
selected records. 

Step 5: Choose the 
format of the report. 

Step 6: Enter the ap- 
propriate command 
to produce the report. 



Parameter 



Qualifier /TYPE 



Many qualifiers 



Qualifier /SORT 

Qualifiers /FULL, 

/SUMMARY, 

/REPORT 

ACCOUNTING 
command 



Default is SYS$MANAGER:ACCOUNTNG.DAT 



Default is all types 



Individual fields may be present in some 
record types and not in others. 



Affects display order of records in full and 
brief formats 

Brief display is the default if no qualifiers are 
specified. 

Requires read access to the accounting file 
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Use command procedures containing quaiifiers to create accounting reports 
— Full command string: 



$ ACCOUNTING - 

_$ /SINCE=02-JDL-1984:05:00 - 
_$ /BEFORE=02-JUL-1984: 10:00- 
_$ /TyPE=PROCESS - 
_$ /SUMMARy= (HOUR, USER) - 
$ /REPORT=BUFFERED 10 



Contents of the DCL command procedure BUFFSUM.COM: 

/TYPE=PROCESS /SOMMARY= (HOUR, USER) /REPORT=BUFFERED_IO 

Abbreviated command string incorporating the DCL command procedure BUFFSUM.COM: 



$ ACCOUNTING - 

_$ /SINCE=02-JUL-1984:05:00 - 

_$ /BEF0RE=02- JUL- 1984 : 10 :00eBUFFSUM 
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MAINTAINING SYSTEM PERFORMANCE 

Optimum system performance requires match of system resources with: 

— Size of VMS data structures 

— Number of installed image flies 

— Size of system files 

System files automatically customized at system Installation to Improve system performance 

— SYS$SYSTEM:VAXVMSSYS.PAR (system parameters) 

— SYS$MANAGER:VMSIMAQES.DAT (list of Images to Install) 
System flies, sizes customized at system Installation 

— Paging file 

— Swapping file 

— Dump file 

Table 9-13: System Files 



File 



Default File Specification 



Function 



Paging file 



Swapping file 



Dump file 



SYS$SYSTEM:PAGEFILE.SYS 



SYS$SYSTEM:SWAPFILE.SYS 



SYS$SYSTEM:SYSDUMP.DMP 



Used to create and manage 
virtual memory 

Used to manage physical 
memory use 

Used to save a copy of physical 
memory when the system fails 
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Change in physical resources should be accompanied by change in: 

— System parameter values 

— System file sizes 
Tools to use 

— SYS$UPDATE:AUTOGEN.COM - Command procedure (recommended method) 

Determines hardware resources 
Computes system parameters 
Creates list of image files to install 
Calculates size of page, swap, and dump files 

— SYS$SYSTEI^:SYSGEN.EXE - utility 

Changes system parameters 

Changes size of page, swap, and dump files 

— SYSBOOT - Conversational startup utility 

Changes system parameters 
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Reconfiguring the System with AUTOGEN 

AUTOGEN mns automatically at system installation 

— Determines system hardware resources 

— Records appropriate system configuration (to be established at startup) 

— Sets system parameter values using SYSGEN utility 

— Creates list of images to install 

— Creates system files using SYSGEN utility 

— Optionally relxiots the system to allow new parameters to take effect 
You should njn AUTOGEN: 

— During a new installation or upgrade 

— When system physical resources change 

— When system workload changes significantly 

— When you add a layered (optional) software product 

Product installation guide tells you what parameters you need to adjust. 

— When you install a shared image 

— To specify a system parameter value or file size manually 
• To njn AUTOGEN: 

@SYS$UPDATE:AUTOGEN [start-phase] [end-phase] [execution-mode] 
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Table 9-14: AUTOGEN Phases 



Phase 



Function 



input files 



Output files 



SAVPARAMS 



GETDATA 



GENPARAMS 



TESTFILES 



GENFILES 



SETPARAMS 



SHUTDOWN 



REBCXDT 



Record feedback 
data 

Collect data re- 
quired for calcula- 
tions 

Calculate parame- 
ter values and file 
slzes,and gener- 
ate list of images 
to install 

Display calculated 
file sizes 

Generate new 
files 



Save calculated 
parameters 

Shut down the 
system 

Reboot to allow 
new files and 
parameters to 
take effect 



None 

MODPARAMS.DAT 
VMSPARAMS.DAT 
AGEN$FEEDBACK.DAT 

PARAI\^S.DAT 



PARAMS.DAT 
PARAMS.DAT 



SETPARAMS.DAT 

None 
None 



NOTE 

Ail data ffles are in the directory SYS$SYSTEM:. 



AGEN$FEEDBACK.DAT 



PARAMS.DAT 



SETPARAMS.DAT 
VMSIM AGES. DAT 
AGEN$FEEDBACK. REPORT 



SYS$OUTPUT 

PAGEFILE.SYS 

SWAPFILE.SYS 

(and secondary paging and 

swapping files) 

SYSDUMRDMP 

AGEN$FEEDBACK.REPORT 

VAXVMSSYS.PAR 

AUTOGEN.PAR 

VAXVMSSYS.OLD 

None 
None 
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Running AUTOGEN 

Modifying System Parameters Without Changing File Sizes 

1. @SYS$UPDATE: AUTOGEN SAVPARAMS 6ENPARAMS 

2. Review these files: 

— PARAMS.DAT (input to calculations) 

— SETPARAMS.DAT (calculated parameters) 

— AGEN$FEEDBACK.REPORT (report on feedback data) 

3. If you want to change any parameters, edit MODPARAMS.DAT and rerun AUTOGEN as in 
step 1 . 

4. esYS$UPDATE : AUTOGEN SETPARAMS REBOOT 

Changing System File Sizes 

1. esYS$UPDATE: AUTOGEN SAVPARAMS TESTFILES 

2. Examine file sizes. 

3. If you want to change file sizes, edit MODPARAMS.DAT and rerun AUTOGEN as In step 1 . 

4, eSYSSUPDATE : AUTOGEN GENPARAMS REBOOT 

Example 9-15: MODPARAMS.DAT File 

MODPARAMS.DAT for node DITTO 

SCSSYSTEMID = 2197 

SCSNODE = "DITTO " 

PAGEFILE = 60000 ! 

ftDD_GBLPAGES = 425+507+157 ! CMS, BLISS32 and ADA (FJM 9/13/87) 

ADD_GBLSECTIONS = 4+5+2 ! CMS, BLISS32 and ADA (FOM 9/13/87) 

LOCKIDTBL =-- 2048 ! FOR RDB (A. B. 9/25/87) 

RESHASHTBL = 16384 ! raised for ODD 40+ (D . E. 2/22/88) 

MIN VIRTOALPAGECNT = 136100! for VTX fvltm 5/25/88) 
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Reconfiguring the System with SYSGEN 

• Use SYSGEN to: 

— Make temporary changes in system parameters. 

— Perform functions not available from AUTOGEN. 

Display parameter settings. 
Load device drivers. 

— Save system parameters in alternate parameter files. 
System parameters 

— Current 

— Active 

— Dynamic 

To invoke SYSGEN utility: 

$ RON SYS$SYSTEM: SYSGEN 
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Table 9-15: Using the SYSGEN Utility 



Function 



Command Format and Examples 



Examine a system 
parameter or group of 
parameters 

Modify a system pa- 
rameter in the SYSGEN 
buffer 

Read a set of system 
parameters Into the 
SYSGEN buffer 



Copy the parameters in 
the SYSGEN buffer to 
memory or disk 

Create or extend a 
paging, swapping, or 
dump file 

Activate a secondary 
paging or swapping file 

Use an alternate DCL 
startup file 

Display HELP informa- 
tion 

Exit from SYSGEN 



SYSGEN> SHOW parameter 
SYSGEN> SHOW MAXPROCESSCNT 
SYSGEN> SHOW /parameter- group 
SYSGEN> SHOW /ALL 

SYSGEN> SET parameter value 
SYSGEN> SET OAFAITERNATE 1 

SYSGEN> DSE source 

SYSGEN> USE ACTIVE 

SYSGEN> USE DEFAULT 

SYSGEN> USE CURRENT 

SYSGEN> USE SYSSMANAGERrALTPARM.PAR 

SYSGEN> WRITE destination 

SYSGEN> WRITE ACTIVE 

SYSGEN> WRITE CURRENT 

SYSGEN> WRITE SYS$MANAGER:ALTPASM.PAR 

SYSGEN> CREATE system-file /SIZE=blocks 

SYSGEN> CREATE DISKALT : [SYSEXEjNEWPAGEFILE. SYS /SIZE=85000 

SYSGEN> INSTALL system-file /type 

SYSGEN> INSTALL DISKALT: [SYSEXE]NEWPAGEFILE .SYS /PAGEFILE 

SYSGEN> INSTALL DISKALT: [SYSEXE]NEWSWAPFILE .SYS /SWAPFILE 

SYSGEN> SET /STARTUP startup- fil 

SYSGEN> SET /STARTUP SYS$SYSTEM:ALTSrART.COM 



SYSGEN> HELP [command [/qualifier]] 



SYSGEN> EXIT 
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Figure 9-2: Using the SYSGEN Utility to Modify System Parameters 
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Performance Tuning 

• Use AUTOGEN to match system configuration to hardware resources and worl<load on 
your system. 

• Do not use SYSGEN to modify system parameters arbitrarily. 
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SUMMARY 

. The VMS operating system provides many commands and utilities for monitoring: 

— System performance 

— Process activity 

— Device status 

. The SHOW SYSTEM command shows the status of each process, Including Its state. 

— Make sure all the necessary system processes are present. 
The Accounting utility shows resource consumption by process. 
The SHOW DEVICES command displays infonnatlon about devices on the system. 

The SHOW MEMORY command displays information about physical memory usage and 

system file usage. 

The SHOW QUEUE command displays the status of print and batch queues. 

The Monitor utility displays information about system resource usage. 

The SHOW PROCESS /CONTINUOUS command displays information about a particular 
process. 

The SHOW USERS command lists the interactive users on the system. 
The AUTOGEN utility: 

— Generates information used to maintain optimum perfomiance. 

System parameters 
System file sizes 
Images to be installed 

— Uses system information as input 

Hardware resources 

System worl<load 

Values specified by system manager 

The SYSGEN utility can also be used to set system parameters, and performs several 
functions not available with AUTOGEN. 
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MODULE 10 
EXERCISES 



EXERCISES 10-1 



UNDERSTANDING THE USER ENVIRONMENT 
Written Exercises 

1. In the exercise below, match each description with the appropriate component of the 
hardware environment. Components of the hardware environment can be used once, more 
than once, or not at all. 

Components of Hardware Environment: 

a. CPU 

b. Console Subsystem 

c. Main Memory 

d. I/O Subsystem 

Descriptions: 

MicroVAX II processor is an example 

Stores instnjctions and data 

Used to monitor and control the system 

Consists of peripherals 

Executes Instmctions 

Contnai panel is part of this subsystem 

Used for starting up and shutting down the system 



are used to connect the various subsystems of the computer. 

a. Peripheral devices 

b. Networi< communication devices 

c. Interconnect devices 

d. Storage devices 

have a television-lil<e screen for displaying information. 

a. Hard-copy terminals 

b. Video terminals 

c. Laser printers 

d. Mass storage devices 
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is NOT a peripheral device. 



a. Terminal 

b. Printer 

c. CPU 

d. Disl< drive 

are high-speed machines usually used for large quantities of output. 

a. l-iard-copy terminals 

b. Disk drives 

c. Laser printers 

d. Line printers 

is NOT a type of disl<. 

a. Reel 

b. Cartridge 

c. Diskette 

d. Disk pack 

record data on magnetic tape. 

a. Disk drives 

b. Tape drives 

c. Terminal servers 

d. VAXcluster systems 
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8. in the exercise below, match each device name with the appropriate description. 
Device Names: 

a. MTAO 

b. DUA2 

C. TTB4 

d. LPAO 

Descriptions: 

Fifth terminal connected to controller B 

First TU77 tape drive connected to controller A 

Third RA81 disk connected to controller A 



in the exercise below, match each description with the appropriate system configuration. 
System Configurations: 

a. Single processor configuration 

b. Tightly coupled system 

c. Loosely coupled system 

d. VAXcluster configuration 

Descriptions: 

Nodes have separate file systems 

Processors cannot operate Independently 

A VAX processor and its peripheral devices 

An example of this type of configuration is a networi^ 

Configured mid-way between tightly coupled and loosely coupled systems 

This type of configuration is also called a multiprocessor 

All nodes reside In close proximity to each other 



10. The is an example of a tightly coupled system. 

a. Micro VAX II 

b. VAX 8820 

c. VAX 8600 

d. VAX-1 1/780 
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11. In the exercise below, match each networi< component with the most appropriate description. 
Networl< Components: 

a. Hardware communication devices 

b. Data transmission media 

c. Terminal servers 

d. DECnet software 
Descriptions: 

Enables communication between networited systems 

An example Is Ethernet cable 

Provides connections between user terminals and systems in a network 

Necessary to achieve physical communication between computers 

An optional component that enhances flexibility 

Transmits data between communications devices 



12. A is a networi< established within a limited geographical area. 

a. Loosely coupled system 

b. Wide area networit 

c. Local area networi< 

d. Multiprocessor 

13. In addition to providing the functions of a networi<, also provide higher availability of 

system resources, as well as faster and easier sharing of infomiation and resources. 

a. VAXciuster configurations 

b. Wide area networi<s 

c. Tightly coupled systems 

d. Terminal servers 

14. The major difference between a cluster and a networ|< is . 

a. VMS DECnet software 

b. VMS cluster software 

c. Communication devices 

d. Processors 
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Solutions 

1. In the exercise below, match each description with the appropriate component of the 
hardware environment. Components of the hardware environment can be used once, more 
than once, or not at all. 

Components of Hardware Environment: 

a. CPU 

b. Console Subsystem 

c. Main Memory 

d. I/O Subsystem 

Descriptions: 

a MIcroVAX II processor Is an example 
c Stores Instnjctions and data 



b Used to monitor and control the system 

J Consists of peripherals 

a Executes instnjctions 



b Control panel is part of this subsystem 

b Used for starting up and shutting down the system 

2. c are used to connect the various subsystems of the computer. 

a. Peripheral devices 

b. Networi^ communication devices 

c. Interconnect devices 

d. Storage devices 

3. b have a television-like screen for displaying information. 

a. Hard-copy terminals 

b. Video terminals 

c. Laser printers 

d. Mass storage devices 
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4. c is NOT a peripheral device. 

a. Terminal 

b. Printer 

c. CPU 

d. Disk drive 

5. d are high-speed machines usually used for large quantities of output. 

a. Hard-copy terminals 

b. Disk drives 

c. Laser printers 

d. Line printers 

6. a is NOT a type of disk. 

a. Reel 

b. Cartridge 

c. Diskette 

d. Disk pack 

7. b record data on magnetic tape. 

a. Disk drives 

b. Tape drives 

c. Terminal servers 

d. VAXcluster systems 
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8. In the exercise below, match each device name with the appropriate description. 
Device Names: 

a. MTAO 

b. DUA2 

0. TTB4 

d. LPAO 

Descriptions: 

c Fifth terminal connected to controller B 

a First TU77 tape drive connected to controller A 

b Third RA81 disk connected to controller A 



In the exercise below, match each description with the appropriate system configuration. 
System Configurations: 

a. Single processor configuration 

b. Tightly coupled system 

c. Loosely coupled system 

d. VAXcluster configuration 

Descriptions: 

c Nodes have separate file systems 

Processors cannot operate independently 



a A VAX processor and its peripheral devices 

c An example of this type of configuration is a networi< 

d Configured mid-way between tightly coupled and loosely coupled systems 

This type of configuration is also called a multiprocessor 



d All nodes reside in close proximity to each other 
10. The b is an example of a tightly coupled system. 

a. Micro VAX II 

b. VAX 8820 

c. VAX 8600 

d. VAX-1 1/780 
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11. In the exercise below, match each network component with the most appropriate description. 
Network Components: 

a. IHarclware communication devices 

b. Data transmission media 

c. Terminal servers 

d. DECnet software 

Descriptions: 

d Enables communication between networ1<ed systems 

b An example is Ethemet cable 

c Provides connections between user terminals and systems in a network 



^ Necessary to achieve physical communication between computers 

^ An optional component that enhances flexibility 

b Transmits data between communications devices 



12. A c is a network established within a limited geographical area. 

a. Loosely coupled system 

b. Wide area network 

c. Local area network 

d. Multiprocessor 

13. In addition to providing the functions of a network, a also provide higher availability of 
system resources, as well as faster and easier sharing of information and resources. 

a. VAXciuster configurations 

b. Wide area networks 

0. Tightly coupled systems 
d. Terminal servers 

14. The major difference between a cluster and a network is b . 

a. VI\1S DECnet software 

b. VMS cluster software 

c. Communication devices 

d. Processors 
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MANAGING SYSTEM USERS 
Written Exercises 

Parti 

Example 10-1 displays the characteristics of a process that has many privileges on your 
system. Using the information displayed In the example, detemnine the value of each of the 
following parameters: 



Answers Parameters 



Account Name 

Default Device and Dlrectoiy Specification 

Interactive Terminal Specification 

Process Identification Numk>er 

Process Name 

User Identification Code 

User Name 



Priority 
CPU Limit 
Open File Quota 
Wori<ing Set Limit 
Working Set Quota 
Privileges (list them) 
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Example 10-1: Process Parameters of a Sample Interactive Process 



$ SHOW PROCESS /ALL 

5-FEB-1988 15:16:44.69 TXBO : User: ROTHERFOR > 

Pid: 0O0O00C2 Proc. name: SmallCreepsDay UIC: [GENESIS, RUTHERFORD] 
Priority: 4 Default file spec: DISKSCOMPACT: [ATLANTIC] 

Devices allocated: TXBO: 

Process Quotas : 
Account name: MUSIC 
CPU limit: 

Buffered I/O byte count quota: 
Timer queue entry quota: 
Paging file quota: 
Default page fault cluster: 
Enqueue quota ; 
Max detached processes: 



Accounting information: 
Buffered I/O count: 
Direct I/O count: 
Page faults: 
Images activated: 
Elapsed CPU time: 
Connect time: 



791 

106 
2916 
23 
00:00i 



Infinite 


Direct I/O limit: 


18 


4000 


Buffered I/O limit: 


18 


10 


Open file quota: 


19 


9064 


Subprocess quota; 


2 


64 


AST quota: 


22 


30 


Shared file limit: 








Max active jobs: 





Peak working set size: 393 




Peak virtual size: 2264 




Mounted volumes: 





16.98 



00:09:28.01 



Process privileges: 
CMKRNL 
GRPNAM 
DETACH 
DIAGNOSE 
GROUP 
TMPMBX 
OPER 
NETMBX 



may change mode to kernel 

may insert in group logical name table 

may create detached processes 

may diagnose devices 

may affect other processes in same group 

may create temporary mailbox 

operator privilege 

may create network device 



Process rights identifiers : 
INTERACTIVE 
LOCAL 

Process Dynamic Memory Area 
Current Size (bytes) 
Free Space (bytes) 
Size of Largest Block 
Number of Free Blocks 

Processes in this tree: 



25600 Current Total Size (pages) 50 

21744 Space in Use (bytes) 3856 

21712 Size of Smallest Block 8 

3 Free Blocks LEQU 32 Bytes 2 



Mike Rutherford 

SmallCreepsDay (*) 

$ 

$ SHOW WORKING_SET 

Working Set /Limit= 150 /Quota= 300 
Adjustment enabled Authorized Quota= 300 

$ 



/Extent= 500 
Authorized Extent= 500 
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Solutions 

Compare your answers with those shown below. For additional information, speak with your 
instructor. 



Answers 




Parameters 


MUSIC 




Account Name 


DISK$COMPACT: 


; [ATLANTIC] 


Default Device and Directory Specification 


TXBO 




Interactive Terminal Specification 


O0OOOOC2 




Process Identification Code 


SraallCreepsDay 


Process Name 


[GENESIS, RUTHERFORD] 


User Identification Code 


RUTHERFORD 




User Name 


4 




Priority 


Infinite 




CPU Limit 


19 




Open File Quota 


150 




Worl^lng Set Limit 


300 




Working Set Quota 


CMKRNL 




Privileges (list them) 


GRPNAM 






DETACH 






DIAGNOSE 






GROUP 






TMPMBX 






OPER 






NETMBX 
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MANAGING SYSTEM USERS 
Written Exercises 

Part II 

You have been told that Susan Jackson, who recently joined the finance group in your company, 
needs an account on your system. The account should have the same basic privileges as 
other accounts In the group. Members of the finance group have the group number 400 for 
their UIC. Each member has a default directory on the disk pointed to by the logical name 
FINANCE DISK. 



The password for Jackson should be her first name, and she should be required to change her 
password immediately upon logging in. 

What steps should you follow? 



10-14 EXERCISES 



Solutions 

To allow a new user to access your system, you should create an account for the user. To allow 
the user to create and maintain files In his or her own area, you must also create a directory for 
the user. Finally, be sure the new user knows how to log in to the account and the procedures 
for using the system. 

a. Creating an account 

To create an account for Susan Jackson, use the AUTHORIZE utility, as follows: 

$ SET DEFAULT SYS$ SYSTEM 

$ RUN AUTHORIZE 

OAF> SHOW /BRIEF [400,*] 



U;VF> ADD JACKSON /PASSWORD=SDSAN /PWDEXPIRED /UIC=[400, 116] - 
_UAF> /DIRECTORY= [JACKSON] /DEVICE=FINANCE_DISK: 
OAF> EXIT 

The output of the SHOW /BRIEF [400,*] command listed all the accounts and their user 
numbers with a group number of 400. You need that information because the JACKSON 
account must have a unique user number. The user number chosen, 116, did not belong 
to anyone else having a group number of 400. 

The /PWDEXPIRED qualifier assures that user Jackson must change her password 
immediately upon logging in to her account. 

b. Creating a directory 

Use the following commands to create a directory for user Jackson: 

$ SET DEFAULT FINANCE_DISK: [000000] 

$ CREATE/DIRECTORY/OWNER=JACKSON [JACKSON] 

c. Instructing the user about system procedures 

New users should receive information about logging in to, and appropriate use of, your 
system. This can be done by you, or by another appropriate person in your organization. 

In this example, Susan Jackson should be told that her user name is JACKSON, her 
password is SUSAN, and she must use a new password when she logs in. In addition, she 
should t>e made aware of any procedures that are specific to your site. 

You can use a command procedure to partially automate the process of adding new user 
accounts and creating directories. SYS$EXAMPLES:ADDUSER.COM is an example of such a 
procedure. To see how it works, type the following command: 

$ @SYS$EXAMPLES: ADDUSER.COM 

This procedure is included on your system and you can customize it to meet the requirements 
of your site. 
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MANAGING SYSTEM USERS 
Laboratory Exercises 

Part I 

To practice controlling user processes, log in at two terminals or do the following with a partner: 

1 . Designate one terminal as the Manager terminal, and the other as the User terminal. Log 
in at both terminals. The process on the Manager terminal must have WORLD or GROUP 
privileges to affect the other processes. 

2. The User should begin entering DCL commands that produce output, such as SHOW 
PROCESS and SHOW SYSTEM. (You can also create a command procedure to do this 
repeatedly.) 

3. Find out the process ID numk>er of the User process from the Manager terminal. 

4. Suspend the User process from the Manager temriinal (preferably while output is appearing 
on the User terminal). 

5. Obsen/e the User terminal. Notice the lack of response from the keyboard (If you press 
any key or combination of keys, the state of the User process does not change). 

6. Allow the User process to continue. 

7. Lower the priority of the User process to three from the Manager temiinal. The User should 
continue to enter DCL commands and observe the response for several minutes. 

8. Raise the priority of the User process to four from the Manager terminal. Continue to 
observe the response to various DCL commands. 

9. Stop the User process from the Manager temiinal. Can the Manager allow the process to 
continue? 
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Solutions 

1 . No solution needed. 

2. A command procedure you might use Is: 

$LOOP : 

$ SHOW PROCESS 
$ SHOW SYSTEM 
$ GOTO LOOP 

This command procedure produces an endless loop. 

3. The commands SHOW SYSTEM and SHOW USERS display the PIDs of the users currently 
on the system. The PID is a hexadecimal number. 

4. $ SET PROCESS /SUSPEND /ID=21400FA1 

Substitute the appropriate PID for 21400FA1. 
5. No solution needed. 

6. $ SET PROCESS /RESUME /ID=21400FA1 

Substitute the appropriate PID for 21400FA1 . 

7. $ SET PROCESS /PRIORITY=3 /ID=21400FA1 

If the process is in your UIC group, you need only specify the process name as a parameter 
instead of using the /ID qualifier. For example, if the process name is SMITH, and the UIC 
of the process has the same group number as yours, you could enter: 

$ SET PR0CESS/PRI0RITY=3 SMITH 

Because the priority of the process is now lower than most of the priorities of the other 
processes on the system, you should observe a delay in the execution of the commands 
entered from the User terminal. 

8. $ SET PROCESS/PRIORITY=4/ID=21400FA1 

The response to the DCL commands entered from the User terminal should be quicker. 

9. $ STOP/ID=21400FA1 

If the process is in your UIC group, you can omit the /ID qualifier and supply the process 
name as a parameter. 

The process cannot be continued, since the STOP command deleted the process. 
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MANAGING SYSTEM USERS 
Laboratory Exercises 

Part II 

NOTE: You cannot perform these exercises unless you have write access to the quota file on 
your class volume. Check with your Instructor before you attempt the exercises. 

1. Log In using your own account. 

2. Run the SYSMAN utility (requires OPER privilege). 

3. Enter the DISKQUOTA ShHOW/DEVICE command, specifying your class volume name, and 
display all the quota records in the quota file for the class volume. 

4. To observe the effects of disl< quotas, perform the following: 

a. Display your cun-ent disl^ quota settings. Write them down. 

b. Delete your record from the quota file. 

c. Exit from the SYSMAN utility. 

d. Try to create a small text file by using either the CREATE command or a text editor. 

e. Reenter the SYSI^IAN utility and add a diskquota record for yourself. Specify the 
values you previously wrote down for permanent quota and overdraft. Do not forget 
to specify your class volume name with the /DEVICE qualifier. 

f. Exit from the SYSMAN utility. 

g. Enter the SHOW QUOTA command (from DCL level). Record the usage count. Create 
a small text file. 

h. Enter the SHOW QUOTA command again. Notice that your usage count has increased. 

1. Reenter the SYSMAN utility and display your diskquota record in the quota file for the 
class volume. Notice that your usage count has been Increased here as well. 

5. Modify your record to increase your permanent quota by 1000 blocks and your overdraft by 
200 blocks. 

6. Exit from the SYSMAN utility. 

7. Set your default to SYS$SYSTEM. 

8. Run the SYSMAN utility again. Enter the appropriate commands to display your record in 
the quota file for the class volume. 
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Solutions 

1. No solution needed. 

2. $ RON SyS$SYSTEM:SYSMAN 

3. SYSMAN>DISKQOOTA SHOW /DEVI CE=CLASS_DISK [*,*] 

Substitute the name of your class volume for CLASS_DISK. 
4. Enter the following commands to observe the effects of disk quotas. 

a. SYSMAN> DISKQUOTA SHOW [320,10] 

Substitute your UIC for [320,10]. If the utility displays the alphanumeric form of 
your UiC, substitute it for [320,10]. For example, if the string form of your UIC is 
[GRP320,SMITH], you should enter the following command: 

SYSMAN> DISKQUOTA SHOW IGRP320, SMITH] 

b. SYSMAN> DISKQUOTA DELETE 1320,10] 
0. SYSMAN>EXIT 

d. Note that you are unable to create files on the volume because you do not have a disl< 
quota. 

e. $ RUN SYS$SYSTEM:SySMAN 

SYSMAN> DISKQUOTA ADD /DEVICE=CLASS_DISK [320, 10] 

Substitute the name of your class volume for CLASS_DISK and your UIC for [320,10]. 

f. SYSMAN>EXIT 

g. $ SHOW QUOTA 

The usage count should be 0. The following is a short text file you might create. 

$ CREATE FILE. TXT 

This is a short text file. 

It should take up at least one block of space . 



CTRL/Z 



h. $ SHOW QUOTA 
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i. $ RUN SYS$ SYSTEM :SYSMAN 

SYSMAN> SHOW /DEVICE=CLASS_DISK [320, 10] 

Substitute the name of your class volume for CLASS_DISK, and your own UiC for 
[320,10]. The utility modifies the quota file dynamically, so it recorded the blocks you 
used for the file when you created it. 

5. SYSMAN> DISKQOOTA MODIFY [320,10] /PERMQUOTA=2000 /OVERDRAFT=300 

Substitute the appropriate values that correspond to your record. 

6. SySMRN>EXIT 

7. S SET DEFADLT SYS$SYSTEM: 

8. $ RON SYSMAN 

SySMAN> SHOW /DEVICE=CLASS_DISK [320,10] 

Substitute the name of your class volume for CLASS_DISK and your own UIC for [320,1 0]. 
If you do not enter the USE command, the utility uses the quota file for the current default 
disk (the system disk), If it exists. That file does not contain your quota record. 
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MANAGING SYSTEM USERS 
Laboratory Exercises 

Part III 

You need write access to the MFD of the class disk and to the system authorization files to do 
this lab. 

1 . Create an account called PAYROLLn, where n is a number assigned by your instructor. 
The group number assigned to workers in Payroll is 322. Choose any member number 
from 60-377 (octal) that is not in use. Also create a directory and a disk quota entry for the 
account. 

Log in to the new account and create a small file in its directory to verify your work. 

2. This account is only allowed to run a data entry program ENTRY.EXE. The name of the 
command procedure used to mn the program is DATA.COM. Your instaictor can tell you 
what directory these files are in. 

Modify the UAF record so that DATA.COM runs automatically when you log in to the 
PAYROLLn account, and so that you cannot reach the DCL prompt. 

3. Log in as PAYROLLn. The DATA.COM procedure should execute automatically. The 
password for the procedure is GO. The procedure executes ENTRY.EXE. When ENTRY.EXE 
requests input, type in three numbers separated by commas. 

To test your work, log out and log in as SMITH several times. Each time, try to cause the 
DCL prompt to appear. (Suggestions: enter CTRUY, enter incorrect data at various points, 
enter the wrong password, etc.) 

4. Do whatever is necessary to remove the account PAYROLLn from the system. 
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Solutions 

1. To add an account, mn the AUTHORIZE and DISKQUOTA utilities and create a UFD as 
shown below: 

$ SET DEFAULT SYS$SYSTEM 
$ RON AUTHORIZE 
OAF>SHOW/BR [322,*] 

(Output shows 63 has not been used as a member number yet) 

UAF>ADD PAYROLLS /PASSWORD=JOE- 
_/UIC=[322,063]- 
_/DEVICE=CLASS_DISK- 
_/DIRECTORY= [PAYR0LL3 ] 
UAF>EXIT 

$ 

$ SET DEFAULT CLASS_DISK: [000000] 

$ 

$ RON SYS$SYSTEM:SYSMAN 

SYSMftN> DISKQUOTA ADD PAYROLLS /DEVICE=CLASS_DISK 

SYSMAN> EXIT 

$ 

$ CREATE/DIRECT0RY/0WNER=PAYR0LL3 [PAYROLLS] 

$ 

You should have been able to create a test file successfully. If not, look at these solutions 
carefully, set up the account properly, and try again. 

Check the owner UIC of the directory if you receive protection errors. Check the contents 
of the QUOTA.SYS file on CLASS_DISK if you receive quota errors. 

2. To modify the account so it can only run the DATA.COM procedure, use the AUTHORIZE 
utility to make the account captive. 

UAF>MODIFY PAYROLLS /LGICMD=CLASS_DISK: [PAYROLL] DATA. COM- 
_/FLAGS= (CTIPTIVE, LOCKPWD, DISCTLY) 

3. If you enter incorrect answers to the DATA.COM procedure or the ENTRY program, you 
are logged out. If you enter letters as data to ENTRY, instead of numbers, you are logged 
out. If you enter a CTR1_/Y key sequence, you are logged out. 

4. To remove the account completely, you must delete all subdirectories and files in 
[PAYROLLS], remove PAYR0LL3.DIR, remove the PAYROLLS entry from the quota file, 
and remove the UAF record from the SYSUAF.DAT file. 
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MANAGING SYSTEM USERS 
Laboratory Exercises 

Part IV 

You need two terminals to perfornrj the following exercises, or, you can pair up with another 
student. Designate one terminal as an Operator terminal, and the other terminal as a User 
terminal. The process mnning on the C perator terminal must have OPER privilege. 

1. Enable the Operator temiinal so that it will receive messages sent to one of the operator 
classes OPER1 through 0PER12. (Ask your instructor which operator class you should 
use.) Use the /TEMPORARY qualifier. 

2. From the Operator terminal, use the REPLY command to send a message to all logged-in 
users, telling them that you are now on duty as an operator. 

3. From the User terminal, use the REQUEST command to send a message that will be 
displayed on the Operator terminal. Observe the output on the Operator terminal. 

4. Send another REQUEST message to 0PER1 requiring a response. Obsen/e the output on 
the Operator terminal. 

5. Respond to the message from the Operator terminal, telling the User that you are worthing 
on the request but you do not have an answer yet. 

6. Issue a REPLY command to display the status of outstanding requests made to your 
operator class. 

7. After awhile, issue an appropriate message from the Operator temiinal and abort the User 
request. 

8. Log out from the Operator terminal. 

9. Send a message to OPER1 from the User terminal that does not require a response. 

10. Does the message appear on the Operator terminal? Why? 

11. Log back in to the Operator terminal. Find out whether it is still enabled to receive operator 
messages. 
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Solutions 

Substitute your assigned operator class for OPER1 In the following solutions. 

1 . $ REPLY /ENABLE=0PER1 /TEMPORARY 

2. $ REPLY /USERS /BELL "Janet S. is now on duty as OPERl . " 

3. $ REQUEST REPLY/ T0=0PER1 "Please check LPAO. " 

You should see a message on the Operator terminal that includes this request. 

4. $ REQUEST /REPLY /T0=0PER1 "Is it OK to print from LPAO?" 

You should see another message, but this one also contains a request Identification number. 

5. $ REPLY /PENDING=123 "Still working on the problem. " 

(Substitute the appropriate request ID number for 123.) 

6. $ REPLY /STATUS 

7. S REPLY /ABORT=123 "LPAO is disabled indefinitely. Use LPBO." 

8. No solution needed. 

9. $ REQUEST /T0=0PER1 "Please back up CLASS_DISK tonight . " 

10. The message should not appear on the Operator terminal screen. 

11. $ REPLY /STATUS 

You should see a message stating that an illegal operator request was made. 
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MANAGING QUEUES 
Laboratory Exercises 

Part I 

1 . Find out what batch queues are already on the system. 

2. Create and start a batch queue with a job limit of two and a priority of one. Make sure the 
queue name is different from any existing queue names. 
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Solutions 



1. S SHOW QUEUE /BATCH 

2. $ INITIALIZE /QUEUE /BATCH /START /J0B_LIMIT=2 

$ /BASE PRIORITY=l SMITH_BATCH 
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MANAGING QUEUES 
Laboratory Exercises 

Part li 

Team up with another student in the class or use two terminals to do the following exercises. 
Use one of the terminals as an output device (printer). This can be a video or a hard-copy 
terminal. You will enter queue manipulation commands from the other terminal. 

1 . Set up one tenninal as an output device. 

a. Log in to the terminal. 

b. Use the SHOW TERMINAL command to list the current characteristics of the terminal. 

c. Write down the device name of the temilnal for future reference. 

d. Modify the characteristics of the terminal with the SET TERMINAL/PERMANENT 
command so that it can be used as an output device. (You will need LOGJO and 
OPER privileges to do this.) 

e. Log out from the terminal. 

2. Enter the following commands from the other terminal: 

a. Spool the output device. 

b. Create and start a queue for the output terminal. Give the queue a name using the 
/ON qualifier. 

0. Print a file at the output terminal, using the queue you just created. Observe the output 
terminal to see if your job is displayed. 

d. Send a print job to your terminal execution queue, including the /HOLD qualifier in the 
command. 

e. Display the contents and characteristics of your terminal execution queue. 

f. Delete your job that is being held on the terminal execution queue. 
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Solutions 

1 . To set up a terminal as an output device, do the following, 
a. No solution needed. 

b. $ SHOW TERMINAL 

c. These solutions use the terminal name TTC5: 

d. $ SET TERMINAL /PERMAMENT /NOTyPE_AHEAD - 
_$ /NOBROADCAST /SPEED=2400 

The /NOTYPE_AHEAD qualifier disables logins on this terminal. If you need to modify 
the terminal further after logging out, you can enter the SET TERMINAUPERMANENT 
command at another terminal. For example, the following command modifies a 
characteristic of the TTC5 terminal: 

$ SET TERMINAL /PERMANENT /NOBROADCAST TTC5 : 

e, $ LOGOUT 

2. The following commands should eventually allow you to see your file displayed on the 
output terminal. 

a. $ SET DEVICE/ SPOOLED TTC5 : 

b. $ INITIALIZE/Q0EaE/START/0N=TTC5: MYQUEOE 

Substitute the name of your output terminal for TTC5:, and substitute your own queue 
name for f^YQUEUE. 

C. $ PRINT/QUEUE=MyQUEOE FILE. TXT 

If you followed the instructions in this lab carefully, you should see your file displayed 
on the output terminal. If your file does not appear, consult your instructor. 

d. $ PRINT/QUEUE=MYQUEUE/HOLD FILE. TXT 

e. $ SHOW QUEOE/FOLL/ALL MYQOEOE 

f. $ DELETE/ENTRY=369 

Substitute the entry number of your job for 369. 
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MANAGING QUEUES 
Laboratory Exercises 

Part III 

1 . Modify the default characteristics of the terminal execution queue you created in the last 
laboratory exercise so that all jobs sent to the queue are printed with flag and trailer pages. 

2. Send a short text file to the output terminal and observe the display. 

3. Initialize and start a batch queue on the system with a job limit of two. Name It MULTIBAT. 

4. Change the job limit on MULTIBAT to four. 

5. Display the characteristics of the queue after changing the job limit to checl( that the 
command was executed properly. 
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Solutions 

1. $ SET QUEUE/SEPARATE=(FIiAG, TRAILER) MYQUEUE 

Substitute the name of your queue for MYQUEUE. 

2. $ PRINT/QOEOE=MyQOEOE F ILE . TXT 

Substitute the name of your file for FILE.TXT. 

3. $ INITIALIZE/Q0E0E/BATCH/START/J0B_LIMIT=2 MDLTIBAT 

4. $ SET Q0EUE/J0B_LIMIT=4 MOLTIBAT 

5. $ SHOW QOEDE/FULL MOLTIBAT 
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MANAGING QUEUES 
Laboratory Exercises 

Part IV 

1 . Send two separate print jobs to your terminal execution queue, liolding them until you 
release them. 

2. Release the first job, then abort it. 

3. Display the contents of the queue immediately after aborting your job. 

4. Stop the queue using the /RESET qualifier. You now have complete control over the queue. 

5. Release the next job being held on the queue. 

6. Display the contents of the queue and note the status of the jobs. 

7. Start the queue and observe the output on your terminal. 

8. Stop and delete your terminal output queue and your batch queue, MULTIBAT, that you 
created in the previous laboratory exercise. 

9. Set the output temiinal back to Its original characteristics. (You will need OPER and 
LOGJO privileges to do this.) 
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Solutions 

Substitute your file names, entry numbers, and queue names in the commands listed below. 

1. $ PRINT/QUEUE=MyQUEUE/HOLD FILE1.TXT 
$ PRINT/QUEOE=MYQUEUE/HOLD FILE2.TXT 

2. $ SET ENTRY 369/RELEASE 
$ STOP /ABORT MYQUEUE 

3. $ SHOW QUEUE MYQUEUE 

Note the status of the jobs on the queue. Also note that trailer pages, if specified, will be 
printed for a job that was aborted. 

4. $ STOP /QUEUE/RESET MYQUEUE 

5. $ SET ENTRY 3 69/RELEASE 

Notice that the job did not print, as the queue is stopped. 

6. 5 SHOW QUEUE MYQUEUE 

7. $ START/QUEUE MYQUEUE 

8. $ STOP /QUEUE /NEXT MYQUEUE 
$ DELETE/QUEUE MYQUEUE 

$ STOP /QUEUE/NEXT MULTIBAT 
$ DELETE/QUEUE MULTIBAT 

9. $ SET DEVICE/NOSPOOL TTC5 : 

$ SET TERMINAL/PERMANENT/TYPE AHEAD /BROADCAST TTC5: 



Substitute the device name of your output terminal for TTC5. 
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MANAGING DISK AND TAPE VOLUMES 
Written Exercises 

User PERDUTO has inadvertently deleted all of the files in his directory and subdirectories 
Perduto's files were in directory [PERDUTO] and its subdirectories, located on device DRA1. 
Your system uses a command procedure that ains each night and backs up files from DRA1 to 
magnetic tape, using the following command: 

$ BACKUP /VERIFY/IMAGE/ JOOKNM.=SYS$MRNAGER:BACKOP. JOURNAL - 

DRAl : MFAO :WORK_DISK.BACKOP/SAVE_SET/REWIND/INITIALIZE 

a. What command would you use to recover the information that has seemingly been lost? 

b. (OPTIONAL) What other method could you have used to recover the lost information? 
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Solutions 



This command creates the subdirectory tree structure and restores ali of the files in 
[PERDUTO] and its subdirectories. 



$ BACKUP MFAO : WORK_D I SK. BACKUP /SAVE_SET/SELECT=[ PERDUTO... ]*.*;* - 
DRAl : [PERDUTO ...]*.*;* 

The most common way to recover (or partially recover) files that have been lost through 
inadvertent deletion is by restoring files that have previously been backed up. Using this 
process, you can restore those files that existed at the time of the most recent system 
bacl^up. However, if your system has VAX RMS Joumaiing and if after-image journaling 
had been used for any data files that were deleted, you can use the RMS Recovery Utility 
to restore the files and include all modifications that were made up to the point where the 
file was deleted. 
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MANAGING DISK AND TAPE VOLUMES 
Laboratory Exercises 

Parti 

You will need a disk drive and a disk volume or a tape drive and a tape volume to complete 
these exercises. 

1. Do the following to initialize and mount a disk volume or a tape volume for public use. 

a. Allocate the device specified by your instructor to your process. 

b. Load your volume on the device. If you are not sure how to load the volume, ask your 
Instructor. 

C. FOR DISK VOLUMES ONLY: 

Mount the disk volume using the /FOREIGN qualifier. 

d. FOR DISK VOLUMES ONLY: 

If your disk is one for which the BAD utility Is valid (In other worcis, not an RA-series 
disk), Invoke the BAD utility to search for bad blocks on the disk volume. 

e. FOR DISK VOLUMES ONLY: 

Dismount, but do not unload, the disk volume. 

f. Initialize the disk or tape volume so that all users will have access to it. 

g. Mount the disk or tape volume so that all users on the system will have access to It 
without having to mount it themselves. 

2. Display the characteristics of the device on which you have just mounted the volume. 

3. Dismount the volume and deallocate the device so that It is available for other users. 
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Solutions 

Substitute the name of the device you are using for DRA1 :, your own logical name for DRIVE, 
and your own label for MYVOL. 

1 . Enter the following commands to prepare a volume for public use: 

a. $ ALLOCATE DRAl : DRIVE 

b. No solution needed. 

C. $ MODNT/FOREIGN DRIVE 

(For disk volumes only) 

d. $ ANALYZE/MEDIA/EXERCISE DRIVE 

(For disk volumes only) 

e. $ DISMOONT/NOUNLOAD DRIVE 

(For disk volumes only) 

f. $ INITIALIZE/SYSTEM DRIVE MYVOL 

g. $ MOUNT/SYSTEM DRIVE MYVOL 

2. $ SHOW DEVICE/FULL DRIVE 

3. $ DISMOUNT DRIVE 

$ DEALLOCATE DRAl : 
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MANAGING DISK AND TAPE VOLUMES 
Laboratory Exercises 

Part II 

You will need two disk drives and two disk volumes to complete these exercises. If you do not 
have the necessary materials to complete the lab, write out the answers on paper and compare 
them to the solutions. 

1. Do the following to create a public volume set using two disk volumes. 

a. Allocate the devices you will be using. 

b. Load the volumes onto their respective drives. If you are not sure how to do this, ask 
your instaictor. 

c. Initialize the volumes. 

d. Mount the volumes using the /SYSTEM and /BIND qualifiers. 

2. Create a user directory on the volume set. 

3. Copy a file from your default directory to your directory on the volume set. 

4. Display the contents of your directory on the volume set. 

5. Dismount the volume set. 
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Solutions 

Substitute the names of your devices, and your own logical names and labels for the names 
and labels shown in these solutions. 

1 . Enter the following commands to create a volume set for public use: 

a. $ ALLOCATE DRAl : DEVI 
$ ALLOCATE DRA2 : DEV2 

b. No solution needed. 

C. $ INITIALIZE/ SYSTEM DEVI OSERl 
$ INITIALIZE/SYSTEM DEV2 USER2 

d. $ MOONT/SYSTEM/BIND=USER_SET DEVI, DEV2 DSERl , 0SER2 

2. $ CREATE/DIRECTORY OSER_DISK: [BROWN] 

3. $ SET DEFAULT SYS$LOGIN 
$ COPY TESTFILE.LIS 

_To : OSER_DISK: (BROWN] * , * 

4. $ DIRECTORY USER_DISK: [BROWN] 

5. S DISMOUNT DEVI 
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MANAGING DISK AND TAPE VOLUMES 
Laboratory Exercises 

Part HI 

You will need a tape drive and tape volume to complete these exercises. 

1 . Create three subdirectories of your default login directory. Call them [.A], [.B], and [.A.A2]. 

2. Copy at least two files into each of the above three subdirectories. 

3. Allocate a tape drive. (If all drives are already allocated by other users, return to this 
exercise later.) 

Load your scratch tape into the drive. If you do not know how to load this drive, consult 
your instructor. 

4. Initialize the scratch tape, then mount the tape as a foreign volume. Back up all the files in 
your directory and its subdirectories to a single save set on the tape. 

5. List the contents of your new save set. 

6. Delete one file in [.B] and selectively restore that file from your save set on tape. 

7. Delete all files in [.A] and [.A.A2] and the subdirectory files themselves. Issue the following 
DCL commands: 

$ DELETE [username.A]*.*;*, [usernanie.A.A2]*.*;* 
$ BACKUP tape:save_set_name disk: [userneune. . . ] 

Note the results. 

What command would you use to correctly restore your subdirectories? 

8. Dismount the tape drive. Issue a REPLY command to inform other students that the tape 
drive is now available. 
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Solutions 

Substitute your own directory and device names for the ones shown in these solutions. You 
can also choose your own tape label and your own file name for the save set. 



1. 



3. 



8. 



$ CREATE/DIRECTORY [MYNAME.A] 
$ CREATE/DIRECTORY [MYNAME.B] 
$ CREATE/DIRECTORY [MYNAME.A.A2] 



$ COPY SYS$LOGIN:*.* [.A] 
$ COPY SYS$LOGIN : * . * [.B] 
$ COPY SYS$LOGIN:*.* [.A.A2] 



$ ALLOCATE WHOOSH$MDA0: 



$ INITIALIZE WHO0SH$MUA0: MYTAPE 

$ MOONT/FOREIGN WHOOSHSMOAO: 

$ BACKUP [...]*.*;* WHOOSH$MUA0 : MYF ILES . BCK /LABEIi=MYTAPE 



$ BACKUP /REWIND /LIST WHOOSH$MUA0 iMYFILES .BCK 



$ DELETE [MYNAME.B] LOGIN. COM;* 

$ BACKUP/LOG WHO0SH$MUA0:MYFILES.BCK/SELECT=[MYNAME.B]LOGIN.COM [MYNAME.B] 

The commands shown cause BACKUP to create an extra level of subdirectories. The 
correct way to restore all your files is to use a command like the following: 

$ BACKUP WHOOSH$MDA0 rMYFILES . BCK STUDENT$DISK :[*...] 



$ DISMOUNT WHOOSH$MOA0: 

$ DEALLOCATE WHOOSH$MUA0: 

$ REPLY/USERS "Tape drive WHOOSHSMOAO is now available" 
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CUSTOMIZING THE SYSTEM 
Laboratory Exercises 

1 . Print the STARTUP.COM file and look at the output (this requires the SYSPRV privilege). 

2. Create TERIVIINALS.COM in your own directory. This procedure should set the permanent 
characteristics of the terminals on your system according to the following information. 

a. Assume that you have eight terminals. 

b. Set up some fast terminals and some slow terminals. 

c. Protect at least three terminals from allocation by processes other than those with a 

[001,004] UIC. 

d. Four of the terminals are VT200-series terminals. 

e. Three are VT 100s. 

f . One is a hard-copy terminal (LA1 20). 

g. The LA120 is attached through a modem. 

h. The other terminals are attached through direct lines. 

i. Include the name of the owner and office number where the terminal is located in a 
comment for each terminal. 

3. Run the INSTALL utility: 

a. List the currently installed images. 

b. Choose one of the image names listed. 

c. Find out how many times the image has been invoked since it was installed. 

d. Send a message to all users indicating that you intend to remove that image from the 
installed list. 

e. Remove the image. 

f. List the installed images and see if it was removed. 

g. Reinstall the image as it was originally installed. (Display the contents of the 
SYS$MANAGER:VMSIMAGES.DAT file to see how it was originally installed.) 

h. Send a message to all users to inform them that the image has been reinstalled. 
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4. (ADVANCED EXERCISE) Create an alternate SYSTARTUP_V5.COM In your own directory. 
Do not execute this procedure to verify your work. Instead, look at the answers provided In 
this booklet. The procedure should include commands to do the following: 

a. Mount the class disk (label « CLASS) on the device DRA1 : Be sure it will be accessible 
to all users. Assign the disk the logical name CLASS_DISK. 

b. Assume that a directory named PROGRAMS.DIR has been created on the system disk 
to contain site-specific programs. Define a system logical name for this directory. 

c. Restrict the number of Interactive users to 35. 

d. Create and start the following queues (if possible). Be sure to start the queue manager 
first. 

SYS$PRINT (generic queue) 

LPAO (print execution queue) 

- Make sure the printer supports lowercase characters and includes a flag page on 
each job printed. 

F0RM3 (logical queue) 

• SYS$BATCH (batch execution queue) 

- Set the job limit at two and the priority at three. 
BIGJOB (batch execution queue) 

- Set the job limit at one and the priority at two. 

- Do not start this queue. 

e. Invoke SYS$MANAGER:TERMINALS.COM 

f. Define the logical names SYS$ANNOUNCE and SYS$WELCOME. 

g. Install the BACKUP.EXE program. Cause the directory Infomiation about the location of 
the program to remain permanently in memory. Cause the header of the BACKUREXE 
file to remain in memory. 

h. Change the default command interface for the INSTALL utility so the alternate command 
interface becomes the current interface. 

i. Rename the second highest version of the operator log to OPERATOR.OLD. Print 
OPERATOR.OLD, and have the system delete the file for you after it has been printed. 

j. Send a message to all terminals telling users that the system is now up and ready for 
use and log out. 
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Solutions 



1. S PRINT SYS$SYSTEM: STARTUP. COM 

The purpose of looking at the STARTUP.COM file is to familiarize yourself with the contents 
of this file as a whole. 

2. A sample TERMINALS.COM file is shown below. This procedure meets the specifications 
of the problem, but it is not the only answer. If your procedure contains most of the same 
kinds of statements. It is probably also con-ect. 

$ ITERMINALS.COM 

$! 

$ ! This file sets up the permanent characteristics of the 

$! terminals on this system. This procedure is typically 

$! invoked from SYSTARTUP V5.COM. 

$! 

$! __ 

$! 

$ SET NOON 

$! 

$ SET TERM/PEFM/NOMODEM- 

/VT200/SPEED=300 TTAO : !J. Smith E15 

$ SET TERM/PEBM/NOMODEM- 

/VT200/SPEED=2400 TTAl : IN.Hae E16 

$ SET TERM/PERM/NOMODEM- 

/VT200/SPEED=9600 TTA2 : IF.Chi E17 

$ SET TERM/PERM/NOMODEM- 

/VT200/SPEED=9600 TTA3: !P. Jones E18 

$ SET TERM/PERM/NOMODEM- 

/VT100/SPEED=2400 TTA4 : ! A. Steel E19 

$ SET TERM/PERM/NOMODEM- 

/VT100/SPEED=9600 TTA5 : ! J. Rowland FOl 

$ SET TERM/PERM/NOMODEM- 

/VT100/SPEED=9600 TTA6: ! M.Carter F02 

$ SET TERM/PERM/MODEM- 

/AUTOBAUD/LA120 TTA7: ! D.Trevor Dial-up 

$! 

$! NOTE: For the LA120 terminal, the speed is 

$ ! set automatically by /ADTOBAUD to 9600 . 

$! 

$!Give [001,004] ownership of three terminals: 

$! 

$ SET PROT=(S,O:R,G,W)/DEVICE/OWNER_OIC=[001,004] TTAO: 

S SET PROT=(S,0:R,G,W)/DEVICE/OWNER_UIC=[001,004] TTA5 : 

$ SET PROT=(S,0:R,G,W)/DEVICE/OWNER UIC= [001, 004] TTA7 : 

$! 

$! NOTE: All users can log in on these terminals, but users 

$! with a UIC of [001,004] can also allocate them. 
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$ INSTALL 

a. INSTALL>LIST 

b. Assume the DIRECTORY image is chosen. 

C. INSTALL>LIST/FULL DIRECTORY 

NOTE: The access count is initialized to each time the image is installed. (Images 
are installed each time the system is started by the startup procedures.) 

d. INSTALL>EXIT 

$ REPLY/BELL/ALL "I am about to de-install the DIRECTORY image" 

e. $ INSTALL/COMMAND_MODE 
INSTftLL>DELETE DIRECTORY 

f. INSTALL>LIST 

(You should not see the DIRECTORY image listed.) 

g. INSTALL>CREATE/OPEN/HEADER/SHARED DIRECTORY 
INSTALL>LIST 

(You should see the DIRECTORY Image listed again.) 

INSTALL>EXIT 
h. $REPLY/BELL/ALL "The DIRECTORY image has been re-installed" 
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4. A sample SYSTARTUP_V5.COM procedure is shown below. This procedure meets the 
specifications of the problem, but It is not the only answer. If your procedure contains most 
of the same kinds of statements, it is probably also correct. 

$! SYSTARTUP_V5.COM 

$! 

$ ! This procedure sets up the system environment according 

$ ! to the resources available and functions performed on 

$! this system. 

S! 

$1 __ 

$! 

$ MOUNT /SYSTEM DRAl : CLASS CLASS DISK 

S! 

$ ASSIGN/SYSTEM SYS$SYSDEVICE:PROGRAMS .DIR PROGRAMS 

$! 

$ SET LOGIN/INTERACTIVE=35 

$! 

$! NOTE: The SET LOGIN/INT command should be placed at the end 

$ ! of the procedure, so users cannot log in while the 

$! procedure is executing. 

S! 

$ START/QUEUE/MANAGER 

$! 

$ ! Start up PRINT and BATCH queues 

$! 

$ INITIALIZE/QUEUE/GENERIC/START SYS$PRINT 

$! 

S SET PRINTER LPAO : /LOWER 

$ SET DEVICE LPAO: /SPOOLED 

$! 

$ INITIALIZE/QUEDE/FLAG/START LPAO 

S! 

$ INITIALIZE/QUEUE/NOENABLE_GENERIC F0RM3 !You cannot start a 

^ ' logical queue until 

^ • it has been assigned 

'■ to a physical queue. 

$ INITIALIZE/QUEUE/BATCH/JOB=2/PRIORITY=3/START SYS$BATCH 
$! 

$ INITIALIZE/QUEUE/BATCH/J0B=1/PRI0RITY=2 BIGJOB 

$! 

$ @SYS$MANAGER:TERMINALS.COM 

$! 

$ ASSIGN/SYSTEM "System number 239 - VAX/VMS " SYS$ANNOONCE 

$ ASSIGN/SYSTEM "Welcome to system 239" SYS$WELCOME 

$! 

$ RUN SYS$SYSTEM: INSTALL 

SYS$SYSTEM:BACKUP /OPEN/HEADER 

EXIT 

$! 

S INSTALL :== $SYS$ SYSTEM: INSTALL 

$! 

$ RENAME OPERATOR. LOG; -1 OPERATOR. OLD 

$ PRINT /DELETE OPERATOR. OLD 

$! 

$ REPLY/BELL/ALL "System 239 is ready for use" 

$! 

$L0 GOUT /BRIEF 
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STARTING UP AND SHUTTING DOWN THE SYSTEM 
Laboratory Exercises 

Part I 

1 . Under the supervision of your instmctor, look at tlie front panels of as many VAX processors 
as are available to you. Become familiar with the Items on them. 

2. Your instructor will shut the system down for you and will turn the power off. (If he or she 
cannot shut the power off, go to problem 3. It is really not a good practice to shut the power 
off and on very often, as it can lead to hardware problems. However, if this is only done 
occasionally, it should not harm the system.) 

3. Start the system from power on, following the instmctions in the VMS Installation and 
Operations manual for this type of processor. 

4. If your instructor allows you to, and if your system has battery backup, set up your system 
for an automatic restart and tum the power off. Start the system from power off. (The 
system should have been running before you began this problem and you should have 
been logged in.) 

5. Your instructor will shut the system down for you. Start the system, specifying the system 
device explicitly. 
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Solutions 

1 . No solution needed. 

2. No solution needed. 

3. No solution needed. 

4. No solution needed. If you set up your system property, it should start and you should be 
able to log in. 

5. No solution needed. 
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STARTING UP AND SHUTTING DOWN THE SYSTEM 
Laboratory Exercises 

Part li 

Do each problem in this lab under the direct supervision of your instructor. 

1. Your instructor will shut the system down for you. The console terminal is now in program 
mode. Log in at the console terminal. 

2. While you are logged in at the console terminal, change to console mode. Do not enter 
any console commands. 

3. Return to program mode and enter the DIRECTORY command. 

4. Disable the use of console mode. Try to enter console mode at the console terminal. 

5. If this system boots by means of boot files, copy the default boot file from the console 
volume to your directory and look at it. Notice that it boots the default system device on 
your system (or it should). 
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Solutions 

1. No solution needed. 

2. When you see the >» prompt, you know you have been successful. 

3. When you see the $ prompt and can enter the DIRECTORY command, you know you are 
In program mode. 

4. You should not be able to enter console mode If you set the switch correctly. 
Enable console mode again when you are done with this problem. 

5. You must be In program mode to copy a file from the console volume. Use the 
SYS$UPDATE:DXCOPY command procedure. If your default boot file, DEFBOO.CMD, 
does not boot your default system device, inform your Instmctor. 
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STARTING UP AND SHUTTING DOWN THE SYSTEM 
Laboratory Exercises 

Part III 



1. Your Instructor will create an alternate copy of the SYS$SYSTEM:SYSUAF.DAT 
file and will modify your account In the new file. The alternate copy is named 
SYS$SYSTEM:SYSU AFALT.DAT. Start the system conversationally, specifying the al- 
ternate UAF file. Log In and enter the SHOW PROCESS command to verify that the 
altemate file was used. The display should contain the new values entered by your 
instructor. Check with your Instructor to verify this. 

2. Your Instnjctor will shut the system down for you. Start it conversationally, specifying the 
normal SYS$SYSTEM:SYSUAF.DAT file as the UAF file. Log In and enter the SHOW 
PROCESS command. The display should look normal. 
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Solutions 



1 . Boot the system conversationally. Enter the commands SET UAFALTERNATE 1 and 
CONTINUE at the SYSBOOT> prompt. 

2. Boot the system conversationally. Enter the commands SET UAFALTERNATE and 
CONTINUE at the SYSBOOT> prompt. 
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STARTING UP AND SHUTTING DOWN THE SYSTEM 
Laboratory Exercises 

Part IV 

You must perform the following exercises on a standalone system under the supervision of your 
instructor. You must start the system up after each exercise. 

1 . Use the orderly shutdown method to shut down your system. 

2. Use the emergency DCL shutdown method to shut down your system. 

3. Force a shutdown using the CCL method. 
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Solutions 

1 . Enter the command: 

@ SYS $ SYSTEM: SHUTDOWN 

and respond to the prompts. 

2. Follow these steps: 

a. Log in as SYSTEM on the console temninal. 

b. Issue the DCL command: 

$ RUN SYS$SYSTEM:OPCCRASH 

c. When the SYSTEM SHUTDOWN COMPLETE message Is displayed, type: 



CTRL/P 



»>H 

3. See the VMS Installation and Operations manual for this type of system. 
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STARTING UP AND SHUTTING DOWN THE SYSTEM 
Laboratory Exercises 

PartV 

Complete the following exercises only under the supervision of your instaictor. 

The purpose of this optional lab is to show you that different errors can occur at different points 
during the startup process. Some emsrs indicate a problem with the console volume. It could 
be conupted, missing, or it could have been replaced by a scratch or data volume. Other en'ors 
indicate a problem with the system disi<. it could be conupted, off-line, write-locked, or certain 
files necessary for the startup process could be missing or conupted. Finally, errors could 
indicate problems with data disks, buses, memory, or other parts of the system. 

You can usually identify the problem by looking at the listing on the console terminal. Certain 
errors occur at certain points in the startup process. For example, if thie console volume is 
missing, you will not even get to the part of the listing where the system volume Is read. Or, 
if you cannot get to the part where the console volume is read, perhaps the problem lies in 
memory or some part of the CPU. 

If you are having problems starting up your system, first check to be sure you are preparing 
your system properly for startup, if you still cannot start it, show the console terminal listings to 
a more experienced person or to a DIGITAL Field Sen/ice representative. 

1. Shut the system down using the normal method. 

2. Remove the console volume. (If this is not possible on your system, go to question 9. If 
you are working on a VAX-1 1/750 system, also set the BOOT DEVICE switch to A.) 

NOTE 

If your console volume is a diskette, do not remove it if you hear a clicking noise from 
the drive. The noise indicates that the system is using the volume. If you remove the 
volume while the system is using it, you can dam^e the volume. 

3. Attempt to t>oot the system by using the boot switch on the front panel or by entering a 
command at the console tenninal. 

4. What are the results? 

5. Place a scratch volume in the console drive. 

6. Attempt to boot the system by using the boot switch on the front panel or by entering a 
command at the console terminal. 

7. What are the results? 

8. Replace the console volume in the console drive. 
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9. Spin down the system disk. 

10. Attempt to boot the system by using the boot switch on the front panel or by entering a 
command at the console terminal. 

11. What are the results? 

12. Spin up the system disk and write protect it. 

13. Attempt to boot the system by using the boot switch on the front panel or by entering a 
command at the console terminal. 

14. What are the results? 

15. Write protect a data disk that your site-specific command procedure normally loads. 

16. Attempt to boot the system by using the boot switch on the front panel or by entering a 
command at the console terminal. 

17. What are the results? 
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Solutions 

1. Use the SHUTD0WN.COM procedure. 

2. No solution needed. 

3. No solution needed. 

4. You should receive an error message at the console terminal. The content of this message 
differs between processors, but its meaning is the same. The meaning is that the system 
cannot boot without the console volume. 

5. No solution needed. 

6. No solution needed. 

7. You should receive a different enror message at the console terminal than the one you 
received when no volume was loaded. The meaning of this second message is that the 
system cannot boot without a proper system console volume. 

8. No solution needed. 

9. No solution needed. 

10. No solution needed. 

11. You should see more messages on the console terminal this time before you see an error 
message. The meaning of this third error message is that the system cannot read the 
system volume when it is not spun up. It must be able to read the system volume to 
complete the startup process. 

12. No solution needed. 

13. No solution needed. 

14. You should see an error message on the console terminal. The meaning of this message 
is that the startup process cannot complete unless it can both read from and write to the 
system disk. 

15. No solution needed. 

16. No solution needed. 

17. The startup process will complete if a data disk is not loaded, but you will receive error 
messages at the console terminal. You should always enter the SHOW DEVICES command 
after the system is up to check on the status of all disk drives, or you should read the 
console listing to be sure all were successfully mounted. 
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INSTALLING AND UPDATING SYSTEM SOFTWARE 
Laboratory Exercises 

1. Print the SYS$MANAGER:SYSTARTUP_V5.COM file on your system and looi< for the 
command that is used to start the networl<. 

2. Obtain a copy of the set of instnjctions for installing Version 5.0 on your system. Under the 
supervision of your instructor, follow these Instructions. 

3. Under the supervision of your instructor, follow the instructions in the VMS Release Notes 
for Version 5.0 to upgrade your system (running Version 4.6 or later) to a Version 5.0 
system. 

4. Under the supervision of your instructor, install a maintenance update on your system 
volume by following the instnjctions in the release notes for the update. Be sure the update 
you are installing is the next sequential update for the volume, as you must apply them in 
sequential order. 

5. After you have Installed, upgraded, or updated your system, run the User Environment Test 
Package by following the instnjctions in the installation guide for your processor. 

6. Under the supervision of your instructor, install one optional product on your system by 
following the instnjctions in the product's installation guide. 

7. Under the supervision of your instoictor, use the SYS$UPDATE:CONSCOPY.COM 
command procedure to create a spare copy of the console volume. 

8. Perform a standalone BACKUP from disk to disk. (If your system has only one disk, perform 
a disk-to-tape BACKUP) This exercise requires your exclusive use of the computer for 30 
to 60 minutes. Inform the instructor that you want to perform this exercise. If time and 
circumstances are not favorable, you may have to perform it at a different time. If you are 
forced to delay this exercise until later, continue with the rest of the module, but return to 
this exercise as soon as possible. 

a. Obtain a standalone BACKUP kit on console media from your instructor. If no kit is 
available, create one. (If your instructor prefers, create a standalone BACKUP kit on 
the system disk instead. If you use a kit on the system disk, leave the normal console 
volume containing the boot software in the console drive and ignore the statements 
about the console volume in this exercise.) 

b. Ask your instructor for a scratch disk (or set of scratch tapes) and a sample data disk 
(or sample system disk) to back up. You will be copying up the entire data (or system) 
disk to the scratch disk (or set of tapes). 

c. At the time designated by the instructor, shut down the computer using the 
SYS$SYSTEM:SHUTDOWN.COM procedure. (The Starting Up and Shutting Down 
the System module discusses this command procedure.) 
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d. Once the system is fully shut down, boot the standalone BACKUP program. 

e. Issue the command to perform the BACKUP. Be sure to Include the /VERIFY qualifier. 

NOTE 

Before issuing any commands to the BACKUP utility, be sure you Icnow whicli 
disk is to be copied (the input disic) and which is the output disk. It is a good 
idea to write-Iock the input disk. Also, have the instructor check both volumes 
and your BACKUP command before you press the RETURN key to enter the 
command. 

f. Once the BACKUP operation is finished, unload the two scratch and sample packs 
used for the exercise and reload (if necessary) the normal system and data packs. 

g. Press the CTHUP key sequence at the console terminal to prepare to Ijoot the system. 
Halt the computer if necessary. 

h. Replace the BACKUP kit console media with the console media containing the boot 
software. 

i. Boot the VMS system from power on. (If you had copied the system disk to an output 
disk, you might want to load the output disk and try to boot from it. The Starting Up 
and Shutting Down the System module discusses how to boot the system from the 
default device or from a device you specify.) 
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Solutions 

1. The command is @STARTNET. 

2. If you followed the instructions carefully, you should be able to boot your system and log in. 
If you cannot do this, consult your instructor. 

3. After you have completed the procedure, you should be able to boot the system and log in. 
If not, consult your Instructor. 

4. If you have followed the instructions carefully, you should be able to boot, log In to, and use 
your updated system, if you cannot do this, consult your instructor. 

5. If you have followed the instructions carefully when installing, upgrading, or updating 
your system, the tests should be successful. If the tests are not successful, consult your 
instmctor. 

6. If you have followed the instructions carefully, the Installation Verification Procedure (IVP) 
done by the product's installation procedure should be successful. If the procedure does 
not include an IVP, test the product yourself. If the tests are not successful, consult your 
instructor. 

7. Run the SYS$UPDATE:CONSCOPY.COM command procedure to save the contents of 
the console volume. Then load a scratch volume in the console device and use the same 
procedure to restore the contents from the system disk to the scratch volume. 

If you followed the instructions carefully, you should be able to boot the system using your 
copy of the console volume. 

8. If you performed a disl<-to-disk backup of a data disk, and you can mount the output copy 
and reference files and directories, you were successful. 

If you did a disk-to-disk backup of a system disk, and you can boot the new disk, you were 
successful. 

If you did a disk-to-tape backup, you should be able to restore the tapes to a scratch disk 
and reference files on it or boot it (depending on the contents of the original disk). The 
Managing Disk and Tape Volumes module discusses how to restore tapes to a scratch 
disk. 
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MAINTAINING SYSTEM INTEGRITY 
Laboratory Exercises 

Parti 

1 . Set your default to your login directory. 

2. Copy the file SYS$SYSTEM:SYSUAF.DAT to your own directory. 

3. Run the AUTHORIZE utility. Using AUTHORIZE, perform the following exercises: 

a. Display in brief format all the records in the UAF that have user names beginning with 
the letter S. 

b. Display in brief fomnat all the records in the UAF that have UIC group number 20. 

c. Display the contents of your own UAF record. 

d. Display the contents of the DEFAULT record. 

e. Modify the DEFAULT record so that the GROUP and GRPNAM privileges are 
automatically given to all new accounts. 

f. Modify the DEFAULT record to increase the ENQLM limit to 30. 

g. Modify the DEFAULT record so that the value of the disk device in the default field Is 
the same as the name of your default disk device. This can be either a real device 
name or a logical name equating to the real device name. (You can display the name 
of your default device by entering the SHOW DEFAULT command at the DCL prompt.) 

h. Display the contents of the DEFAULT record to verify your changes. 

i. Create a new UAF record with the user name SMITH and a group number of 322. 
Remember to specify a password for SMITH, but do not specify any other values. 

NOTE 

Ignore any informational or error messages you receive about the rights database. 

J. Display the contents of the new record. 

k. Compare the values of the fields in the new record with the values of the fields in the 
DEFAULT record. What are your conclusions? 

I. Create a new UAF record in group 322 for user JONES. Use the COPY command to 
create a record for user DOE. Assign each user a unique member number, password, 
owner, and default directory. 
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m. Display all the UAF records in JONES' group using the brief format. Use a wildcard in 
the command. 

n. Modify account JONES to limit the login time for the primary days MON, TUE, WED, 
THU from 8 a.m. to 4 p.m. and secondary days FRI, SAT, SUN from 4 pm to 11 pm. 
Examine the record. 

o. Modify account JONES to limit dial-in capability from 6 p.m. to 10 p.m. for secondary 
days. Establish default privileges of TMPMBX, NETMBX, SYSPRV and an additional 
authorized privilege of VOLPRO. Examine the record. 

p. Disable user SMITH from logging in. 

q. Delete the UAF record for user SMITH. 

r. Generate a brief listing and a full listing of all user records. Print the listing file on a 
printing device. 
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Solutions 



1. S SET DEFAULT SYS$LOGIN 

2. $ COPY SYS$ SYSTEM: SYSUAF.DAT * 

3. $ RUN SYS$SYSTEM: AUTHORIZE 

a. UAF> SHOW /BRIEF S* 

b. UAF> SHOW /BRIEF [20, *] 
C. OAF> SHOW username 

d. UAF> SHOW DEFAULT 

e. Enter the following commands at the UAF> prompt: 

UAF>MODIFY DEFAULT/PRIVILEGE= <GROUP, GRPNAM) - 
_UAF>/DEFPRIVILEGE= (GROUP , GRPNAM) 

You can record two sets of privileges in each UAF record. One set contains 
the authorized privileges (PRIVILEGE); the other set contains the default privileges 
(DEFPRIVILEGE). Users receive the default privileges when they log in. Users can give 
themselves any of their authorized privileges by using the SET PROCESS/PRIVILEGE 
command. 

f. UAF>MODIFY DEFAULT /ENQLM=30 

g. UAF>MODIFY DEFAULT /DEVICE=CLASS_DISK 

Substitute the name of the device you are using for CLASS_DISK. 

h. UAF> SHOW DEFAULT 

I. UAF>ADD SMITH /PASSWORD=ENIGMA /UIC= [322, 1] 

You can change your password and UIC if you choose. 

]. UAF>SHOW SMITH 

k. The values of the fields in SI\/IITH should be identical to the values of the same fields 
in DEFAULT, with the exception of the user name and UIC fields. Notice, also, that 
SMITH has the GROUP and GRPNAM privileges. 
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I. OAF>ADD JONES /UIC=[322,2] /OWNER="Jane Jones" - 
_OAF>/DIRECTORY= [JONES] 

OAF>COPY JONES DOE /DIC=t322,3] /OWNER="Ken Doe" - 
_UAF>/DIRECTORy= [DOE] 

The password for these accounts is USER, since no password was indicated when the 
records were created. Note that each user has a unique member number, but that all 
are members of the same group. 

m. UAF>SHOW/BRIEF [322,*] 

n. UM'>MODIFY JONES /PRIMEDAYS= (NOFRI , NOSAT, NOSDN) - 
_UAF>/ACCESS= (PRIMARY, 8-3, SECONDARY, 16-22) 
UAF>SHOW JONES 

O. UAF>MODIFY JONES /DIALIN= (SECONDARY, 18-21) /DEFPRIVILEGES= - 
_UAF > ( TMPMBX, NETMBX , SYSPRV) - 
_UAF>/PRIV= (TMPMBX, NETMBX, SYSPRV, VOLPRO) 

UAF>SHOW JONES 

p. UAF>MODIFY SMITH /FLAG=DISOSER 

q. UAF>REMOVE SMITH 

r. OAF> LIST/BRIEF* 
OAF> LIST/FULL* 
DAF> EXIT 
$ PRINT SYSUAF.LIS;* 
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MAINTAINING SYSTEM INTEGRITY 
Laboratory Exercises 

Part li 

Pair up with another student to do this exercise. You must have write access to the user 
authorization fiie to do this exercise. You may also need the SYSPRV privilege. 

1 . Log in using your own account. Set your default to SYS$SYSTEM and run the AUTHORIZE 
utility. Display a list of all identifiers in the system rights list. 

2. Create an identifier called READERn, where n Is a number assigned to you by your 
instnjctor. 

3. Exit from the utility. Set your default back to your login directory. 

4. Create a file called TEXT.TXT. With the ACL editor, create an ACE for the identifier 
READERn in the ACL of your file. In the ACE, specify that holders of the READERn 
identifier will be allowed to read the file. Also set the UIC protection code on the file to 
allow Group and Worid users no access. 

5. Type the file TEXT.TXT on your terminal screen. Note that you have access to the file even 
though you do not hold the identifier READERn. 

6. Ask your partner to try to type the file. 

7. Run the AUTHORIZE utility. Grant the READERn identifier to your partner's account. Show 
the UAF record for your partner's account and note the identifers that have been assigned 
to it. 

8. Ask your partner to log out and then log back in, and to try typing the file again. Now have 
he or she try to edit the file. 

9. Display a list of all the identifiers held by your account. 

10. Create a file containing a list of all the Identifiers in the system rights list. 
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Solutions 

Substitute your assigned identifier for READER1 in the following solutions. 

1. $ SET DEFAULT SYS$ SYSTEM 
$ RUN AUTHORIZE 
UAF>SHOW /IDENTIFIER * 

BATCH 
LOCAL 
INTERACTIVE 



2. UAF>ADD / IDENT IF lER READERl 

3. OAF>EXIT 

S SET DEFAULT SYS$LOGIN 

4. You may create the text file in the following manner: 



$ CREATE TEXT. TXT 
This is a test file. 



CTRL/Z 



To invoke the ACL editor, type the following: 

$ EDIT/ACL TEXT. TXT 

You should receive a prompt of the form (IDENTIFIER= . Enter the followirig after this 
prompt: 

READERl, OPTIONS=NONE,ACCESS=READ) 

Then, type CTRI_/Z to exit from the editor. (Pressing RETURN will prompt you for another 
identifier.) 

Finally, to set the protection on the file so that Group and World users have no access, 
enter the command: 

$ SET PROTECTION=(G,W) TEXT . TXT 

5. You have access to the file because you are the owner, and System and Owner UlC-based 
protection overrides ACL-based protection. 
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6. Your partner will get an error message when trying to type the file, since your partner's 
account does not hold the READER identifier, and Group and World users have no access 
to the file according to the UlC-based protection code that you defined. 

7. $ SET DEFAOLT SyS$ SYSTEM 
$ RUN AUTHORIZE 

UAF>GRANT/IDENTIFIER READER! STUDENTS 
UAF>SHOW STUDENTS 

The utility lists the identifiers held at the bottom of the display. 

(Substitute your partner's user name for STUDENTS in this example.) 

8. Your partner should be able to read the file but should not be able to edit the file because 
neither the identifier nor UlC-based protection allow he or she to have write access to the 
file. 

9. UAF> SHOW /RIGHTS /USER=uaername 

10. UAF> LIST /IDENTIFIER * 
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MAINTAINING SYSTEM INTEGRITY 
Laboratory Exercises 

Part ill 

NOTE 

You must have write access to the system authorization ffle and the SECURITY privilege 
to do this lab. 

1. Create a secondary password for your UAF record. Log out and log In. What has changed? 

2. Create a system password and set the appropriate characteristics of your temilnal so It is 
a system-password-required terminal. Log out and log In. What has changed? 

3. Make your temninal more secure by setting the SECURE_SERVER characteristic on it. Log 
out and log In. What has changed? 

4. Create another UAF record. Set the expiration date on the new UAF record to be five 
minutes after the current time. Wait at least five minutes. Attempt to log in to the new 
account. What happens? Log in to your own account and delete the extra UAF record. 

5. Change the minimum length of the password to 16 on your own account, set a flag to 
require password generation, exit from the utility, log out and log In. 

6. Change your password with a DCL command that uses one of the choices listed by the 
generator (or generate a new list). 

7. Use the SET AUDIT and SHOW AUDIT commands to define and display various types of 
audit. 

8. Log out and attempt to log in several times, specifying an Incorrect password each time. 
Observe the output on the console terminal. 
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Solutions 



1. $ SET DEFAULT SYS$SYSTEM 
$ RUN AUTHORIZE 

UAF> MODIFY JONES/PASS'^ORD= (" " , SECRET) 

The system displays a second password prompt when you log in. 

2. Use the SET PASSWORD/SYSTEM command to create a system password. Use the 
SET TERMINAL command to modify your terminal characteristics as shown in the module. 
When you log In to your account after setting these up, you must enter the system password 
before you see the prompt for your user name. 

3. Use the SET TERMINAL/SECURE_SERVER command as shown in this module to make 
your terminal more secure. This time, you must press the BREAK key and enter a system 
password t>efore you see the prompt for your user name. 

4. You will not be able to log in to the new account i^ecause it has expired. 

5. Use the /FLAGS=GENPWD qualifier to the MODIFY command in the AUTHORIZE utility to 
do this. 

6. When you enter the SET PASSWORD command, it automatically generates a list of 
passwords for you to choose from. 

7. No answer needed. 

8. No answer needed. 
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MAINTAINING SYSTEM INTEGRITY 
Laboratory Exercises 

Part IV 

1 . Use the SDA utility to generate a report at your terminal about the last system failure. 
Find out and record the following: 

a. The name of the process whose state was CUR 

b. How many processes were active 

c. The reason for the failure (or recorded reason). 

d. The contents of general register 6 

e. The user names of processes that were in the COM state 

f. The name of the image file that was executing 

2. Look In the correct system directory (use a logical name) to see if ERRLOG.OLD exists. 
If It does not exist, rename the current error log file to ERRLOG.OLD. 

3. Use the ERF utility to examine the contents of ERRLOG.OLD. If the file Is very large, use 
the /SINCE qualifier to examine only the section for the last few days. If no entries are 
listed for the requested event, enter a less recent date or examine the entire file. 

a. List all memory error entries in brief format at your terminal. 

b. List all CPU-related entries in full format at your temninal. 

c. List all errors recorded for the device where your class disk is loaded in summary 
format. 

d. List all entries recorded because of device mounts and dismounts. Send the listing to 
the system line printer. 

4. If you have never seen an SPR form, and the instructor has made one available, take the 
time to look at It during this lab period. Take note of the types of information requested, so 
if a problem occurs, you will be more likely to remember to obtain the needed information. 

5. Is it necessary to complete the entire form for all problems? 

6. What information should be sent with the form to DIGITAL? And why? 

7. List the test files used by the UETP. Use a system logical name In the command. 
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Solutions 

1. $ SET PROCESS /PRIVILEGE=SySPRV 

$ iRNALYZE /CRASH_DUMP SYS $ SYSTEM : SYSDUMP 

a. SDA> SHOW PROCESS/ALL 

b. SDA> SHOW SUMMARY 
C. SDA> SHOW CRASH 

d. SDA> SHOW CRASH 

e. SDA> SHOW SUMMARY 

f . SDA> SHOW CRASH 

The stated reason for the system failure Is not always the real reason. Another event may 
have actually caused the failure. Also, the system manager cannot routinely conclude that 
the current process at the time of the failure caused the failure. 

A system programmer can use the information gathered from the SDA utility to discover 
the cause of the problem. The information for a particular failure may not be very helpful, 
but when combined with other information collected over a period of time, the problem may 
be found. 

The job of the system manager is not to interpret the output to the SDA utility, but to 
collect the information. If the system fails repeatedly with the same stated reason, this MAY 
indicate either a software or hardware problem. The software problem may be caused by 
site-specific software or by system software. In either case, the output to the SDA utility 
should always be saved and stored in a central location. If the failures continue, and the 
DIGITAL representative has access to these output records, the cause for the failure will 
be easier to isolate and solve. 

2. If ERRLOG.OLD did not exist in SYS$ERRORLOG: $RENAME ERRLOG.SYS ER- 

RLOG.OLD NOTE: After this command has been entered, ERRLOG.SYS does not exist. 
If an event occurs that needs to be recorded, the ERRFMT process will create a new 
ERRLOG.SYS file. 
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3. Use the ANALYZE/ERROR_LOG command with the following qualifiers to generate the 
reports: 

a. /INCLUDE=MEMORY/BRIEF 

b. /INCLUDE=CPU_ENTRIES 
Full format is the default format. 

C. /INCLUDE=CLASS_DISK/SUMMARY 

Substitute the name of your class disk for CLASS_DISK. 
d. /INCLUDE=VOLUME_CHANGES/OUTPUT=LPA0: 

4. No answer needed. 

5. Most of the information requested on the form should be supplied for problems and errors. 

6. Infonnatlon such as listings, programs, related files, data files, number of users, version 
of software, etc. should be provided. Problems should be presented In a concise and 
complete manner. This will help the DIGITAL software engineer solve the problem. 

7. $ DIRECTORY SYS$TEST 
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MAINTAINING SYSTEM INTEGRITY 
Laboratory Exercises 

PartV 

These exercises are optional. 

1. Modify your SYSTARTUP_V5.COM file to run tlie SDA utility and analyze the system 
failure. Send the output from the utility to a file. Include a command to print the file. 

2. Create a command procedure to rename the en-or file every day at midnight. The procedure 
should save old versions. Old versions should have names that correspond to the day they 
were created, such as FEB23. The procedure should njn the ERF utility to generate a 
summary report of all errors on a daily basis and print the report. 
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Solutions 

1. See the SDA VMS V5 dump file in l\/lodule 8. 

2. A suggested command procedure follows. Log in as SYSTEM or be sure you have SYSPRV 
before executing this. To be sure this is run daily, modify the SYSTARTUP_V5.COM file 
and include the line: 

$ SUBMIT TRACKERR /AFTER="23 :59:59. 99" 

If an error occurs during the execution of this procedure, a mail message Is automatically 
sent to the SYSTEM account. 

$! 

$ ITRACKERR.COM 

$! 

$! 

$0N ERROR THEN GOTO ERROR_HANDLER 

S! 

$TIME = ""F$TIME()'" 

$! 

$SET DEFAULT SYS$ERRORLOG 

$! 

SRENAME ERRLOG.SYS ERRLOG.OLD 

S! 

$ ANALyZE/ERROR_LOG/SUMMARY/OUTPUT=REPORT . DAT 

$! 

$DAY = FSEXTRACT (0,2, TIME) 

$! 

$MONTH = F$EXTRACT (3, 3, TIME) 

$! 

$FILE = "" MONTH' ' ' DAY' .DAT" 

$! 

$ RENAME ERRLOG.OLD 'FILE' 

$! 

$REPORT = ""MONTH" 'DAY' .RPT" 

$! 

$RENAME REPORT.DAT 'REPORT' 

$! 

$PRINT 'REPORT' 

S! 

$GOTO RESUBMIT_AND_EXIT 

S! 

$ERROR_HANDLER: 

$! 

$MAIL/SUBJECT="TRACKERR.COM has failed" NL: SYSTEM 

$! 

$RESUBMIT_AND_EXIT : 

S! 

SSUBMIT/AFTER="23:59:59.99" TRACKERR.COM 

$! 

$EXIT 
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MONITORING THE SYSTEM 
Laboratory Exercises 

Parti 

1. Using a video terminal, run tiie MONITOR utility to display the MONITOR> prompt. At the 
prompt, enter a command to the utility to display the PAGE class with an update interval of 
ten seconds. Allow the utility to run for five to ten minutes. Watch the display and notice 
how (if you are on an active system) the display changes with time. 

2. Retum to the MONITOR> prompt and display the SYSTEM class. 

3. Retum to the MONITOR> prompt and display the 10 class. 

4. Use MONITOR to create a file called SUMMARY.DAT that contains summary Information 
about the PROCESSES class. Allow the utility to write several screens of information to 
the file before you enter the CTRLyZ key sequence to return to the DCL prompt. (Each time 
the values in the display change, the utility writes a copy of the display to the file.) Display 
the file on your terminal screen after you exit from the utility. 

5. Retum to the MONIT0R> prompt and display any other classes that you want. Use the 
HELP facility in the MONITOR utility to list the names of the classes and possible qualifiers. 

6. Use the SHOW USERS command to obtain a list of the interactive users on the system. 
Use the SHOW SYSTEM command to obtain a list of the processes on the system. 
Compare the names of the interactive users with the list of process names. Note which 
processes appear in one but not the other. 

7. Use the SHOW PROCESS/CONTINUOUS command to examine your own process. What 
image does the program Indicate you are njnnlng? 
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Solutions 



$ MONITOR 

MONITOR> MONITOR PAGE 



CTRL_C| 



MONITOR> MONITOR SYSTEM 



CTRL C 



MONITOR> MONITOR 10 

4. 

ICTRL Cl 

MONITOR > MONITOR PROCESS/SOtftlARY^SOMMARY.DAT 

ICTRJ^ 

$ TYPE SUMMARY. OAT 

5. Enter the CTRLyC key sequence to cancel any display and return to the MONITOR> prompt. 

$ MONITOR 

MONITOR> HELP MONITOR 

6. There should be more processes listed by SHOW SYSTEM than by SHOW USERS. SHOW 
SYSTEM lists the system processes, interactive processes, processes from batch queues, 
and subprocesses. SHOW USERS lists interactive users attached to terminals. 

7. SHOW PROCESS/CONTINUOUS shows that you are executing the image 
SYS$SYSROOT:[SYSEXE]SHOW.EXE. 
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MONITORING THE SYSTEM 
Laboratory Exercises 

Part II 

In these exercises, you use a command procedure called HARMLESS_AUT0GEN.COM. Your 
Instructor should tell you In what directory to find this procedure. 

HARMLESS_AUTOGEN mimics the actions of SYS$UPDATE:AUTOGEN.COM, except that it 
does not create or modify any system files or shut down the system. Instead, It creates files in 
your default login directory (SYS$LOGiN:). 

1. Create a file MODPARAMS.DAT in your default directory SYS$LOGIN: (not in 
SYS$IVIANAGER:). Have It contain values for the following: 

• Preserve the values of parameters SCSNODE and SCSSYSTEMiD for this system 
(use the values that appear in SYS$SYSTEIVI:MODPARAMS.DAT). 

• Set LRPSIZE so that each large request packet (LRP) of nonpaged pool is 512 bytes. 

• Set VIRTUALPAGECNT to allow a program to use 20 megabytes (40960 pages) of 
virtual memory. 

Set MAXSYSGROUP to decrease the maximum UIC group number for a system user 
to four. 

Set RJOBLIM to allow only four remote temiinals to log In concunrentiy. 

Increase the number of global sections by six, and the number of global pages by 300. 

2. Run HARMLESS_AUTOGEN so that it starts at the earliest possible phase and ends with 
the phase that reports on system file sizes. 

3. Examine SYS$LOGiN:AGEN$FEEDBACK. REPORT and SYS$LOGIN:SETPARAMS.DAT 
(You may want to print them.) Verify that AUTOGEN generated con-ect settings for 
the parameters that you specified in MODPARAMS.DAT. If settings are incorrect, edit 
MODPARAMS.DAT and perfomi the previous step again. 

4. Run HARMLESS_AUTOGEN so that it starts by generating system parameter values and 
ends by rebooting the system. (It will not cause the system to reboot, but will display a 
message at the point where AUTOGEN would have rebooted the system.) 

5. Use the SYSGEN utility to examine SYS$LOGIN:AUTOGEN.PAR. For the parameters 
that you specified in MODPARAMS.DAT, verify that AUTOGEN set them correctly In 
AUTOGEN. PAR. 

6. Still using this AUTOGEN. PAR file, generate a listing file showing the values of the MAJOR 
parameters. Call the file MAJOR.LiS. Print the file. 
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Solutions 

1 . Your file should be similar to the following: 

! This is a sample MODPARAMS.DAT 
r 

SCSNODE = "PAMAMA" 

SCSSYSTEMID = 2278 

LRPSIZE = 512 

MIN_VIRTUALPAGECNT = 40960 ! Use MIN in case AUTOGEN calculates a higher value 

MAXSYSGROOP = 4 

RJOBLIM = 4 

ADD_GBLSECTIONS = 6 

ADD_GBLPAGES =300 

2. $ 8dir:HARMLESS_AUTOGEN SAVP ARAMS TESTFILES 

3. No solution needed. 

4. $ @dir:HARMLESS_AUTOGEN GENPARAMS REBOOT 

5. 

$ RUN SYS$SYSTEM:SYSGEN 
SYSGEN> USE AUTOGEN.PAR 
SYSGEN> SHOW SCSNODE 
SYSGEN> SHOW SCSSYSTEMID 
SYSGEN> SHOW LRPSIZE 



SYSGEN> SET /OUTPUT=MAJOR.LIS 

SYSGEN> SHOW /MAJOR 

SYSGEN> EXIT 

$ PRINT MAJOR. LIS 
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MONITORING THE SYSTEM 
Laboratory Exercises 

Part III 

1. To observe how the ACCOUNTING utility works, perform the following: 

a. Find out what classes of accounting have been enabled. 

b. Disable the recording of accounting data on print jobs. 

c. Send a file to the printer. 

d. Enable the recording of accounting on print jobs. 

e. Send a file to the printer. 

f. Generate an ACCOUNTING report in brief format that shows all print jobs completed 
within the last hour. Observe the contents of the report. 

2. Create an accounting report in full format that shows all print jobs completed within the last 
hour. Send the report directly to the printer. Collect the output and observe the fonnat and 
contents of the report. 

3. Use the ACCOUNTING utility to examine the following record types: 

a. Login failures (in brief format) 

b. Interactive job terminations (in brief format) 

c. Process terminations (in brief format) 

d. System initializations (in full fomiat) 

4. Use the ACCOUNTING utility to display a summary report of the accounting records that 
have your user name. 

5. Create a report in summary format containing the data collected on direct I/O from interactive 
processes today. List the data In order by UlC, and send the report directly to the printer. 
(This can all be done in the same command.) 

6. Create a summary report that shows how many batch jobs have completed in each hour. 

7. Find out whether anyone has tried and failed to log In to the SYSTEM account. 
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Solutions 



1. Enter the following commands to observe how the ACCOUNTING utility works: 

a. $ SHOW ACCOUNTING 

b. $ SET ACCOONTING/DISABLE= (PRINT) 
C. $ PRINT FILE. TXT 

Substitute the name of your file for FILE.TXT. 

d. $ SET ACCOONTING/ENABLE= (PRINT) 

e. $ PRINT FILE.TXT 

t. S ACCOUNTING/TYPE=PRINT/SINCE=14:00 

Substitute an appropriate time for 14:00. Note that the report contains a brief description 
of your print jobs (if they have already completed) as well as descriptions of other jobs. 

2. $ ACC0UHTING/F0LL/TYPE=PRINT/SINCE=14 : 00/OUTPOT=LPA0 : 

Substitute an appropriate time for 14:00 and the device name of your line printer for LPAO:. 
The colon (:) indicates that LPAO: is a device and not a file specification. If the colon is 
omitted, the output from the report is stored in a file named LPAO. LIS. 

3. Enter the following commands to use the ACCOUNTING utility: 

a. $ ACCOUNTING/TYPE=LOGFAIL 

b. S ACCODNTING/PROCESS=INTERACTIVE 
C. $ ACCOUNTING/TYPE=PROCESS 

d. S ACCOUNTING/FaLL/TYPE=SYSINIT 

4. $ ACCOUNTING /SUMM7UIY=USER /REPORT=RECORDS /OSER=SMITH 

Substitute your user name for SMITH. 

5. $ ACCOUNTING /SUMMARy=UIC - 

_$ /REPORT=DIRECT_IO /SINCE=00:00 /OUTPUT=LPA0 : 

Substitute the device name of your line printer for LPAO: The information in the report Is 
organized in order by UIC. 

6. $ ACCOUNTING /TYPE=BATCH /SUMMARY=HOUR 

7. $ ACCOUNTING /USER=SYSTEM /TYPE=LOGFAIL 
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MODULE 11 
POST-TEST 



POST-TEST 11-1 



TEST 

Write the letter of the best answer in the blank next to each question. 

1 . If you have installed the VMS operating system, what do you have to do to install a 



new version containing minor changes and corrections to the system code? 

a. Upgrade the VMS operating system 

b. Install the VMS operating system from scratch 
0. Update the VMS operating system 

d. Reboot the system 

Which of the following is stored in the User Authorization File? 



a. Process disk quotas 

b. Process device drivers 
0. Process privileges 

d. Process library names 

Which utility is used to locate defective blocks on a disk pack? 



a. ANALYZE/DISK_STRUCTURE 

b. BAD 

0. SYSMAN 

d. EXCHANGE 

^Which of the following can you create using the AUTHORIZE utility? 



a. ACL 

b. File protection code 

c. Identifier 

d. ACE 
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5. Which of the following would you use to cause the VMS system to record events 

such as process deletion, print job completion, login failure and batch job completion? 

a. SET ACCOUNTING 

b. SET ACCOUNTING/RECORD 
C. ACCOUNTING 

d. ACCOUNTING/RECORD 

6. Which of the following should be used to upgrade or update system software? 

a. SYS$UPDATE 

b. VMSINSTAL 
C. SYSGEN 

d. INSTALL 

7. Which of the following should be used to examine a system failure dump file? 



a. ERF 

b. SYSGEN 
C. SDA 

d. UETP 

8- Which of the following commands displays (on one screen) several of the most 

important classes of information a system manager can monitor? 

a. $ MONITOR SCS 

b. $ MONITOR SYSTEM 
C. $ MONITOR STATES 

d. $ MONITOR ALL CLASSES 
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Which of the following control break-in detection? 



a. Symbols 

b. Identifiers 

c. Logical names 

d. System parameters 

10. Which of the following commands creates a user record and an identifier? 

a. UAF> ADD/IDENTIFIER 

b. UAF>ADD 
C. $ EDIT/ACL 

d. $ CREATE/DIR/IDENTIFIER 

11. ^Which of the following commands is recommended to stop a running system? 

a. $ RUN OPCCRASH 

b. »>@CRASH 

C. $ ©SHUTDOWN 
d. $ RUN SYSGEN 

1 2. What file do you edit to make parameter changes permanently known to AUTOGEN? 

a. SYS$MANAGER:VMSIMAGES.DAT 

b. SYS$UPDATE:AUTOGEN.DAT 

C. SYS$SYSTEM:SETPARAMS.DAT 
d. SYS$SYSTEM:MODPARAMS.DAT 
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13. If you receive a Files-11 tape from a user who requests you to print one of tine files 

on it, which of the following DCL commands must you issue first? 

a. MOUNT 

b. INITIALIZE 
C. ASSIGN 

d. COPY 



14. Which utility is used to make shareable files available to all users? 

a. SYSGEN 

b. SDA 

c. ERF 

d. INSTALL 

15. Which DCL command is used to create a queue? 

a. CREATE/QUEUE 

b. START/QUEUE 

c. ASSIGN/QUEUE 

d. INITIALIZE/QUEUE 



16. ^When installing a system, which of the following files can be of any size, regardless 

of the amount of memory on the system? 

a. Page file 

b. Swap file 

c. Dump file 

d. Parameter file 
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17. What is the function of a Software Performance Report (SPR)? 

a. Collect and display software performance information 

b. Analyze software performance information 

c. Report software problems to DIGITAL 

d. Report software problems to system users 

18. Which utility is invoked during a conversational startup? 

a. SYSGEN 

b. SYSBOOT 
C. VMSINSTAL 
d. SDA 



19. ^Which of the following accounts cannot be used to log in on a newly installed VMS 

system? 

a. SYSTEM 

b. FIELD 

0. DEFAULT 
d. SYSTEST 



20. In which directory would you normally find on-line diagnostic files? 

a. SYS$MANAGER 

b. SYS$MAINTENANCE 
C. SYSSUPDATE 

d. SYS$SYSTEM 
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21 . ^Which utility is used to generate an error log report? 

a. SDA 

b. MONITOR 

c. ERF 

d. UETP 

22. In which file are temiinal speeds, queues, and other system management related 

operations usually specified? 

a. SYL0GIN.COM 

b. SYSTARTUP_V5.COM 
C. STARTUP.COM 

d. SYL0GiCALS.COM 

23. ^Which procedure should mount site-specific volumes? 

a. SYSTARTUP_V5.COM 

b. STARTURCOM 

C. SYL0GICALS.COM 
d. SYCONFIG.COM 

24. ^Which procedure should define standard logical names such as SYS$LOGIN, 

SYS$ANNOUNCE, and SYS$WELCOME? 

a. SYL0GICALS.COM 

b. SYC0NFIG.COM 

C. SYSTARTUP_V5.COM 
d. STARTURCOM 
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25. In which table are shareable logical name tables cataloged? 

a. LNM$SYSTEM_TABLE 

b. LNM$GROUP 
0. LNM$JOB 

d. LNM$PROCESS_TABLE 

26. Which DCL command is used to enable an operator's temlnal? 

a. REPLY 

b. SET TERMINAL 
C. SET PROCESS 
d. REQUEST 

27. Before an active queue can be deleted, it must first be: 

a. Initialized 

b. Stopped 

c. Spooled 

d. Started 
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ANSWERS 

1. c If you have installed the VMS operating system, what do you have to do to Install a 
new version containing minor changes and corrections to the system code? 

a. Upgrade the VMS operating system 

b. Install the VMS operating system from scratch 

c. Update the VMS operating system 

d. Reboot the system 

2. c Which of the following is stored In the User Authorization File? 

a. Process disk quotas 

b. Process device drivers 

c. Process privileges 

d. Process library names 

3. b^Which utility is used to locate defective blocks on a disk pack? 

a. ANALYZE/DISK_STRUCTURE 

b. BAD 

C. SYSMAN 
d. EXCHANGE 

4. c Which of the following can you create using the AUTHORIZE utility? 

a. ACL 

b. File protection code 

c. Identifier 

d. ACE 
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5. a Which of the following would you use to cause the VMS system to record events 
such as process deletion, print job completion, login failure and batch job completion? 

a. SET ACCOUNTING 

b. SET ACCOUNTING/RECORD 
C. ACCOUNTING 

d. ACCOUNTING/RECORD 

6. b Which of the following should be used to upgrade or update system software? 

a. SYS$UPDATE 

b. VMSINSTAL 
C. SYSGEN 

d. INSTALL 

7. c Which of the following should be used to examine a system failure dump file? 

a. ERF 

b. SYSGEN 

c. SDA 

d. UETP 



8- b Which of the following commands displays (on one screen) several of the most 
important classes of information a system manager can monitor? 

a. $ MONITOR SCS 

b. $ MONITOR SYSTEM 
C. $ MONITOR STATES 

d. $ MONITOR ALL_CLASSES 



11-12 POST-TEST 



9. c W hich of the following control break-in detection? 

a. Symbols 

b. Identifiers 

c. Logical names 

d. System parameters 

10. b Which of the following commands creates a user record and an identifier? 

a. UAF> ADD/IDENTIFIER 

b. UAF> ADD 
C. $ EDIT/ACL 

d. $ CREATE/DIR/IDENTIFIER 

11. c Which of the following commands is recommended to stop a running system? 

a. $ RUN OPCCRASH 

b. »>@CRASH 

C. $ ©SHUTDOWN 
d. $RUNSYSGEN 

1 2. d W hat file do you edit to make parameter changes permanently known to AUTOGEN? 

a. SYS$MANAGER:VMSIMAGES.DAT 

b. SYS$UPDATE:AUTOGEN.DAT 

C. SYS$SYSTEM:SETPARAMS.DAT 
d. SYS$SYSTEM:MODPARAMS.DAT 
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13. a If you receive a Files-11 tape from a user who requests you to print one of tlie files 
on it, wtiich of the following DCL commands must you need to issue first? 

a. MOUNT 

b. INITIALIZE 
C. ASSIGN 

d. COPY 



14. d W hich utility is used to make shareable files available to all users? 

a. SYSGEN 

b. SDA 

c. ERF 

d. INSTALL 

15. d W hich DCL command is used to create a queue? 

a. CREATE/QUEUE 

b. START/QUEUE 
C. ASSIGN/QUEUE 
d. INITIALIZE/QUEUE 



16. d W hen installing a system, which of the following files can be of any size, regardless 
of the amount of memory on the system? 

a. Page file 

b. Swap file 

c. Dump file 

d. Parameter file 
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17. c W hat is the function of a Software Performance Report (SPR)? 

a. Collect and display software performance information 

b. Analyze software performance information 

c. Report software problems to DIGITAL 

d. Report software problems to system users 

18. b W hich utility is invoked during a conversational startup? 

a. SYSGEN 

b. SYSBOOT 
C. VMSINSTAL 
d. SDA 



19. c W hich of the following accounts cannot be used to log in on a newly installed VMS 
system? 

a. SYSTEM 

b. FIELD 

C. DEFAULT 
d. SYSTEST 



20. b In which directory would you nomialiy find on-line diagnostic flies? 

a. SYS$MANAGER 

b. SYS$MAINTENANCE 
C. SYS$UPDATE 

d. SYS$SYSTEM 
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21. c Which utility Is used to generate an error log report? 

a. SDA 

b. MONITOR 

c. ERF 

d. UETP 

22. b In which file are terminal speeds, queues, and other system management related 
operations usually specified? 

a. SYL0GIN.COM 

b. SYSTARTUP_V5.COM 

c. STARTUP.COM 

d. SYL0GICALS.COM 

23. a W hich procedure should mount site-specific volumes? 

a. SYSTARTUP_V5.COM 

b. STARTURCOM 

C. SYLOGICALS.COM 
d. SYC0NFIG.COM 



24. a W hich procedure should define standard logical names such as SYS$LOGIN, 
SYS$ANNOUNCE, and SYS$WELCOME? 

a. SYLOGICALS.COM 

b. SYCONFIG.COM 

C. SYSTARTUP_V5.COM 
d. STARTURCOM 
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25. a In which table are shareable logical name tables cataloged? 

a. LNM$SYSTEM_TABLE 

b. LNM$GROUP 
0. LNM$JOB 

d. LNM$PROCESS_TABLE 

26. a Which DCL command is used to enable an operator's terminal? 

a. REPLY 

b. SET TERMINAL 

c. SET PROCESS 

d. REQUEST 

27. b Before an active queue can be deleted, it must first be: 

a. Initialized 

b. Stopped 

c. Spooled 

d. Started 
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